DoorGets Cross-Site Request Forgery Vulnerability

doorGets is a content management system CMS. The system supports multiple languages, and system backups and theme changes, etc. A cross-site request forgery vulnerability exists in doorGets version 7.0 in dg-user/?controller=users&action=add. A remote attacker can exploit this vulnerability to ad...

PT-2018-18988 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: An issue was discovered that allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in the user/adv.php endpoint. This can be leveraged for database access by...