İçeriğe atla
Noroxi

doorgets kayıtları

doorgets üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2019-11616
    40Planlayın

    doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php.

    KritikCVSS 9,8İstismar yokEPSS %2

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11618
    40Planlayın

    doorGets 7.0 has a default administrator credential vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %2

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11615
    35İzleyin

    /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11617
    35İzleyin

    doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2018-11126
    35İzleyin

    dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.

    YüksekCVSS 8,8İstismar yokEPSS %1

    doorgets · doorgets15 May 2018

  • CVE-2019-11608
    33İzleyin

    doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php.

    YüksekCVSS 8,2İstismar yokEPSS %4

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11609
    33İzleyin

    doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php.

    YüksekCVSS 8,2İstismar yokEPSS %4

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11606
    31İzleyin

    doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php.

    YüksekCVSS 7,5İstismar yokEPSS %4

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11607
    31İzleyin

    doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php.

    YüksekCVSS 7,5İstismar yokEPSS %4

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11610
    31İzleyin

    doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php.

    YüksekCVSS 7,5İstismar yokEPSS %4

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11611
    31İzleyin

    doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php.

    YüksekCVSS 7,5İstismar yokEPSS %4

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11612
    31İzleyin

    doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php.

    YüksekCVSS 7,5İstismar yokEPSS %3

    doorgets · doorgets cms30 Nis 2019

  • CVE-2018-20064
    31İzleyin

    doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a dg-user/?controller=theme&act

    YüksekCVSS 7,5İstismar yokEPSS %3

    doorgets · doorgets11 Ara 2018

  • CVE-2019-11614
    30İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php.

    YüksekCVSS 7,5İstismar yokEPSS %2

    doorgets · doorgets cms30 Nis 2019

  • CVE-2014-1459
    27İzleyin

    SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbi

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    doorgets · doorgets cms11 Şub 2014

  • CVE-2019-11613
    26İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php.

    OrtaCVSS 6,5İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11626
    21İzleyin

    routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c

    OrtaCVSS 5,3İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11624
    19İzleyin

    doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php.

    OrtaCVSS 4,9İstismar yokEPSS %2

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11621
    19İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network.

    OrtaCVSS 4,9İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11622
    19İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php.

    OrtaCVSS 4,9İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11620
    19İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php.

    OrtaCVSS 4,9İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11625
    19İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php.

    OrtaCVSS 4,9İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11619
    19İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics.

    OrtaCVSS 4,9İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019

  • CVE-2019-11623
    19İzleyin

    doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb.

    OrtaCVSS 4,9İstismar yokEPSS %1

    doorgets · doorgets cms30 Nis 2019