doorGets SQL Injection Vulnerability (CNVD-2019-26504)

doorGets is a content management system CMS. The system supports multiple languages, and system backups and theme changes, etc. A SQL injection vulnerability exists in doorGets version 7.0, which can be exploited by attackers to execute illegal SQL commands...

doorGets SQL Injection Vulnerability (CNVD-2019-26506)

doorGets is a content management system CMS. The system supports multiple languages, and system backups and theme changes, etc. A SQL injection vulnerability exists in doorGets version 7.0, which can be exploited by attackers to execute illegal SQL commands...

doorGets SQL Injection Vulnerability (CNVD-2019-26507)

doorGets is a content management system CMS. The system supports multiple languages, and system backups and theme changes, etc. A SQL injection vulnerability exists in doorGets version 7.0, which can be exploited by attackers to execute illegal SQL commands...

PT-2019-12427

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability in the /doorgets/app/requests/user/modulecategoryRequest.php file. A remote user with background administrator privileges or permission to manage...

PT-2019-12413

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to obtain server-sensitive information due to a sensitive information disclosure vulnerability in the /fileman/php/copyfile.php endpoint. Recommendations For...

PT-2019-12415

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/renamefile.php endpoint. This can lead to the disclosure of server-sensitive...

PT-2019-12414

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/copydir.php endpoint. This enables the attacker to obtain server-sensitive...

PT-2019-12416

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/movefile.php endpoint. This can lead to the disclosure of server-sensitive...

PT-2019-12417

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/downloaddir.php endpoint. This enables the attacker to obtain server-sensitive...

PT-2019-12419

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to delete arbitrary files due to an arbitrary file deletion vulnerability in the /fileman/php/deletefile.php endpoint. Recommendations For doorGets version 7.0...

PT-2019-12420

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability located in the /doorgets/app/views/ajax/contactView.php file. This could allow a remote, normally registered user to exploit the vulnerability and obtain...

PT-2019-12418

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/download.php endpoint to obtain server-sensitive information. Recommendations F...

PT-2019-12424

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote attacker to exploit a CSRF vulnerability in the /doorgets/app/requests/user/configurationRequest.php endpoint, potentially leading to modification of the "Google Analytics code"...

PT-2019-12425

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote attacker to gain administrator privileges for creating and modifying articles. This can be achieved by exploiting a default administrator credential vulnerability, potentially using an...

PT-2019-12423

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to disclose sensitive information. Specifically, the vulnerability is present in the /setup/temp/admin.php and /setup/temp/database.php API endpoints, which...

PT-2019-12422

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote normal registered user to upload arbitrary files, potentially including backdoor files, to control the server. This is due to a vulnerability in the /fileman/php/upload.php endpoint...

PT-2019-12421

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthorized attacker to exploit a SQL injection vulnerability in the /doorgets/app/views/ajax/commentView.php file to obtain sensitive database information. Recommendations For doorGe...

PT-2019-12426

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability in the /doorgets/app/requests/user/configurationRequest.php endpoint when the action parameter is set to analytics. This could allow a remote background...

PT-2019-12428

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue is related to a SQL injection vulnerability in the /doorgets/app/requests/user/configurationRequest.php endpoint when the action parameter is set to network. This could allow a remote background...

PT-2019-12430

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote background administrator privilege user, or a user with permission to manage configuration siteweb, to exploit a SQL injection vulnerability. This vulnerability is located in the...