CVE-2019-11626

CVE-2019-11626 affects doorGets 7.0, where routers/ajaxRouter.php exposes a web site physical path via an ajax/index.php?uri=1234\ request. The published sources (NVD, Red Hat, CNVD, CVE lists) describe an information-disclosure vulnerability in doorGets 7.0’s AJAX router, enabling path leakage. ...

CVE-2019-11625

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php. A remote background administrator privilege user or a user with permission to manage emailing could exploit the vulnerability to obtain database sensitive information...

CVE-2019-11625

doorGets 7.0 is affected by a SQL injection in /doorgets/app/requests/user/emailingRequest.php. A remote, background administrator privilege user (or a user with permission to manage emailing) could exploit this to obtain sensitive information from the database. The connected sources corroborate ...

CVE-2019-11624

doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote background administrator privilege user can exploit this vulnerability to delete arbitrary files...

CVE-2019-11624

CVE-2019-11624 affects doorGets 7.0, enabling an arbitrary file deletion via /doorgets/app/requests/user/configurationRequest.php. The issue allows a remote background administrator privilege user to delete arbitrary files. Documents consistently describe the vulnerability but do not provide a pa...

CVE-2019-11623

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user or a user with permission to manage configuration siteweb could exploit the vulnerability to obtain database sensitive...

CVE-2019-11623

CVE-2019-11623 describes a SQL injection in doorGets 7.0 via /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator or a user with permission to manage configuration siteweb could exploit this to obtain database-sensitive information. The cited...

CVE-2019-11622

CVE-2019-11622 affects doorGets 7.0 with a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user (or a user with permission to manage modulecategory) can exploit this flaw to obtain sensitive information from the dat...

CVE-2019-11622

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user or a user with permission to manage modulecategory could exploit the vulnerability to obtain database sensitive information via...

CVE-2019-11621

The provided connected sources confirm a SQL injection vulnerability in doorGets 7.0 affecting the file /doorgets/app/requests/user/configurationRequest.php when action=network. A remote attacker with background administrator privileges or permissions to manage network configuration could exploit...

CVE-2019-11621

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. A remote background administrator privilege user or a user with permission to manage network configuration could exploit the vulnerability to obtain database sensitive...

CVE-2019-11620

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user or a user with permission to manage modulecategory could exploit the vulnerability to obtain database sensitive information via...

CVE-2019-11620

DoorGets 7.0 contains a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. The issue allows a remote privileged user (with backend/ modulecategory rights) to retrieve sensitive data from the database via modulecategory_add_titre. Documents do not specify affecte...

CVE-2019-11619

CVE-2019-11619 : Multiple connected sources confirm a SQL injection in doorGets 7.0, specifically in /doorgets/app/requests/user/configurationRequest.php when action=analytics. The vulnerability allows a remote backend administrator (or a user with permission to manage configuration analytics) to...

CVE-2019-11619

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics. A remote background administrator privilege user or a user with permission to manage configuration analytics could exploit the vulnerability to obtain database sensitive...

CVE-2019-11618

CVE-2019-11618 affects doorGets 7.0 and is caused by a default administrator credential vulnerability. A remote attacker can gain administrator privileges to create/modify articles by using the token H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 in a URI (blog action to /api/index.php). Public docu...

CVE-2019-11618

doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 accesstoken in a uri=blog&action=index&controller=blog...

CVE-2019-11617

doorGets 7.0 is affected by a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php that allows a remote attacker to modify the Google Analytics code. Affected component is the configurationRequest endpoint; root cause is CSRF in user configuration handling. Documents consist...

CVE-2019-11617

doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote attacker can exploit this vulnerability for "Google Analytics code" modification...

CVE-2019-11616

doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated attacker could exploit this vulnerability to obtain the administrator password...