DoorGets Sensitive Information Disclosure Vulnerability (CNVD-2019-13791)

DoorGets is a free and open source content management system. A sensitive information disclosure vulnerability exists in /fileman/php/movefile.php in doorGets 7.0. A remote, unauthenticated attacker can exploit this vulnerability to obtain sensitive information about the server or make the server...

CVE-2019-11609

The CVE-2019-11609 entry concerns doorGets 7.0, where a vulnerability in /fileman/php/movefile.php allows a remote unauthenticated attacker to disclose server‑level sensitive information or render the server unserviceable. The Red Hat and CNVD/CVE mirrors corroborate the same description. Technic...

CVE-2019-11609: Improper Limitation of a Pathname to a Restricted Directory

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable...

PT-2019-12416

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to exploit a sensitive information disclosure vulnerability in the /fileman/php/movefile.php endpoint. This can lead to the disclosure of server-sensitive...

PT-2019-18454

Name of the Vulnerable Software and Affected Versions Roxy Fileman version 1.4.5 Description The issue allows attackers to execute certain operations, including renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File...

CVE-2019-7174: Undefined Security Weakness

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File operations...