Vulnerabilities (CVE)

Filtered by vendor Doorgets Subscribe
Filtered by product Doorgets Cms
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-11606 1 Doorgets 1 Doorgets Cms 2024-11-21 5.0 MEDIUM 7.5 HIGH
doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
CVE-2014-1459 1 Doorgets 1 Doorgets Cms 2024-11-21 6.5 MEDIUM N/A
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the _position_down_id parameter. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.