doorgets vulnerabilities

Recent CVEs affecting doorgets products. 23 tracked.

doorgets has 23 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-04-30. Highest priority: CVE-2019-11618 (score 65/100).

• CVE-2019-11626 MEDIUM 5.3 DOWNGRADE routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by
• CVE-2019-11625 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php
• CVE-2019-11624 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.
• CVE-2019-11623 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when ac
• CVE-2019-11622 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php
• CVE-2019-11621 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when ac
• CVE-2019-11620 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php
• CVE-2019-11619 MEDIUM 4.9 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when ac
• CVE-2019-11618 CRITICAL 9.8 DOWNGRADE doorGets 7.0 has a default administrator credential vulnerability
• CVE-2019-11617 HIGH 8.8 DOWNGRADE doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php
• CVE-2019-11616 CRITICAL 9.8 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/dat
• CVE-2019-11615 HIGH 8.8 DOWNGRADE /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability
• CVE-2019-11614 HIGH 7.5 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php
• CVE-2019-11613 MEDIUM 6.5 DOWNGRADE doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php
• CVE-2019-11612 HIGH 7.5 DOWNGRADE doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php
• CVE-2019-11611 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php
• CVE-2019-11610 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php
• CVE-2019-11609 HIGH 8.2 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php
• CVE-2019-11608 HIGH 8.2 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php
• CVE-2019-11607 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php
• CVE-2019-11606 HIGH 7.5 DOWNGRADE doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php
• CVE-2018-20064 HIGH 7.5 DOWNGRADE doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a
• CVE-2018-11126 HIGH 8.8 DOWNGRADE dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.

FAQ

How do I fix doorgets vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is doorgets being exploited right now?

None of the tracked doorgets CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which doorgets CVE should I patch first?

CVE-2019-11618 currently ranks highest (65/100): doorGets 7.0 has a default administrator credential vulnerability.

Products

• doorgets
• doorgets cms

RSS feed for doorgets · ← Back to latest CVEs