PT-2018-10320

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue concerns a CSRF problem in the dg-user/?controller=users&action=add API endpoint, which can lead to the addition of an administrator account. Recommendations For doorGets version 7.0, consider...

CVE-2018-11126: Cross-Site Request Forgery (CSRF)

dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account...