PT-2014-4194

Name of the Vulnerable Software and Affected Versions doorGets CMS versions 5.2 and earlier Description The issue allows remote authenticated administrators to execute arbitrary SQL commands via the position down id parameter in the dg-admin/index.php file. This can be leveraged using CSRF to all...