doorgets cms vulnerabilities and fixes

Recent CVEs affecting doorgets cms, with upgrade or downgrade steps. 21 tracked.

Also searched as: doorgetscms.

doorgets cms has 21 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-04-30. Highest priority: CVE-2019-11618 (score 65/100).

• CVE-2019-11626 MEDIUM 5.3 DOWNGRADE routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by
• CVE-2019-11625 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php
• CVE-2019-11624 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.
• CVE-2019-11623 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when ac
• CVE-2019-11622 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php
• CVE-2019-11621 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when ac
• CVE-2019-11620 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php
• CVE-2019-11619 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when ac
• CVE-2019-11618 CRITICAL 9.8 DOWNGRADE doorGets 7.0 has a default administrator credential vulnerability
• CVE-2019-11617 HIGH 8.8 DOWNGRADE doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php
• CVE-2019-11616 CRITICAL 9.8 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/dat
• CVE-2019-11615 HIGH 8.8 DOWNGRADE /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability
• CVE-2019-11614 HIGH 7.5 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php
• CVE-2019-11613 MEDIUM 6.5 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php
• CVE-2019-11612 HIGH 7.5 DOWNGRADE doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php
• CVE-2019-11611 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php
• CVE-2019-11610 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php
• CVE-2019-11609 HIGH 8.2 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php
• CVE-2019-11608 HIGH 8.2 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php
• CVE-2019-11607 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php
• CVE-2019-11606 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php

FAQ

How do I fix doorgets cms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is doorgets cms being exploited right now?

None of the tracked doorgets cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which doorgets cms CVE should I patch first?

CVE-2019-11618 currently ranks highest (65/100): doorGets 7.0 has a default administrator credential vulnerability.

RSS feed for doorgets cms · ← Back to latest CVEs