Filtered by vendor Doorgets Subscriptions
Filtered by product Doorgets Cms Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-11606 1 Doorgets 1 Doorgets Cms 2024-11-21 N/A
doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
CVE-2014-1459 1 Doorgets 1 Doorgets Cms 2024-11-21 N/A
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the _position_down_id parameter. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.