CVE-2019-25105

A vulnerability, which was classified as problematic, was found in dro.pm. This affects an unknown part of the file web/fileman.php. The manipulation of the argument secret/key leads to cross site scripting. It is possible to initiate the attack remotely. This product does not use versioning. Thi...

Information disclosure

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

Information disclosure

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

CVE-2019-11611

DoorGets 7.0 is affected by a sensitive information disclosure in /fileman/php/download.php. A remote unauthenticated attacker can exploit this to obtain server‑sensitive information. The connected records corroborate the issue but do not provide the root cause details, affected versions beyond 7...

CVE-2019-11610

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

PT-2019-12413

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to obtain server-sensitive information due to a sensitive information disclosure vulnerability in the /fileman/php/copyfile.php endpoint. Recommendations For...

PT-2019-12415

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/renamefile.php endpoint. This can lead to the disclosure of server-sensitive...

PT-2019-12414

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/copydir.php endpoint. This enables the attacker to obtain server-sensitive...

PT-2019-12416

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/movefile.php endpoint. This can lead to the disclosure of server-sensitive...

PT-2019-12417

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/downloaddir.php endpoint. This enables the attacker to obtain server-sensitive...

PT-2019-12419

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to delete arbitrary files due to an arbitrary file deletion vulnerability in the /fileman/php/deletefile.php endpoint. Recommendations For doorGets version 7.0...

PT-2019-12418

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/download.php endpoint to obtain server-sensitive information. Recommendations F...

PT-2019-12422

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote normal registered user to upload arbitrary files, potentially including backdoor files, to control the server. This is due to a vulnerability in the /fileman/php/upload.php endpoint...

CVE-2019-11612: Improper Limitation of a Pathname to a Restricted Directory

doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to delete arbitrary files...

CVE-2019-11611: Improper Limitation of a Pathname to a Restricted Directory

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

CVE-2019-11608: Improper Limitation of a Pathname to a Restricted Directory

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable...

doorGets CMS 7.0 - Arbitrary File Download

doorGets CMS 7.0 - Arbitrary File Download Exploit Title: doorGets CMS 7.0 - Arbitrary File Download Dork: N/A Date: 2019-01-16 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.doorgets.com/ Software Link:...