doorGets 7.0 contactView.php sql injection

entryeditHistoryDiffjsonxmlCTI

A vulnerability, which was classified as critical, was found in doorGets 7.0. Affected is an unknown part of the file /doorgets/app/views/ajax/contactView.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

IDCommitedUserFieldChangeRemarksModeratedReasonC
892999606/05/2020VulD...discoverydate155606400006/05/2020accepted100
893004605/01/2019VulD...cvss3_nvd_basescore6.5nist.gov05/01/2019accepted90
893004505/01/2019VulD...0day_days605/01/2019accepted90
893004405/01/2019VulD...cvss3_vuldb_rcX05/01/2019accepted90
893004305/01/2019VulD...cvss3_vuldb_rlX05/01/2019accepted90
893004205/01/2019VulD...cvss3_vuldb_eX05/01/2019accepted90
893004105/01/2019VulD...cvss2_vuldb_rcND05/01/2019accepted90
893004005/01/2019VulD...cvss2_vuldb_rlND05/01/2019accepted90
893003905/01/2019VulD...cvss2_vuldb_eND05/01/2019accepted90
893003805/01/2019VulD...seealso134260 134259 134258 134257 134255 134254 134253 13425205/01/2019accepted100
893003705/01/2019VulD...cve_nvd_summarydoorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php. A remote normal registered user could exploit the vulnerability to obtain database sensitive information.mitre.org05/01/2019accepted100
893003605/01/2019VulD...cve_assigned1556582400mitre.org05/01/2019accepted100
893003505/01/2019VulD...cveCVE-2019-11613mitre.org05/01/2019accepted100
893003405/01/2019VulD...price_0day$0-$5ksee documentation05/01/2019accepted100
893003305/01/2019VulD...date1556582400 (04/30/2019)05/01/2019accepted100
893003205/01/2019VulD...cvss3_nvd_aNnist.gov05/01/2019accepted100
893003105/01/2019VulD...cvss3_nvd_iNnist.gov05/01/2019accepted100
893003005/01/2019VulD...cvss3_nvd_cHnist.gov05/01/2019accepted100
893002905/01/2019VulD...cvss3_nvd_sUnist.gov05/01/2019accepted100
893002805/01/2019VulD...cvss3_nvd_uiNnist.gov05/01/2019accepted100

Do you know our Splunk app?

Download it now for free!