3 matches found
CVE-2019-11623
doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user or a user with permission to manage configuration siteweb could exploit the vulnerability to obtain database sensitive...
PT-2019-12430
Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote background administrator privilege user, or a user with permission to manage configuration siteweb, to exploit a SQL injection vulnerability. This vulnerability is located in the...
CVE-2005-1582: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php for 1Two News 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 nom, 2 email, 3 siteweb, or 4 commentaire variables...