doorGets 7.0 commentView.php sql injection

entryeditHistoryDiffjsonxmlCTI

A vulnerability has been found in doorGets 7.0 and classified as critical. Affected by this vulnerability is an unknown code of the file /doorgets/app/views/ajax/commentView.php. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
8930050	06/05/2020	VulD...	discoverydate	1556064000		06/05/2020	accepted	100
8930100	05/01/2019	VulD...	cvss3_nvd_basescore	7.5	nist.gov	05/01/2019	accepted	90
8930099	05/01/2019	VulD...	0day_days	6		05/01/2019	accepted	90
8930098	05/01/2019	VulD...	cvss3_vuldb_rc	X		05/01/2019	accepted	90
8930097	05/01/2019	VulD...	cvss3_vuldb_rl	X		05/01/2019	accepted	90
8930096	05/01/2019	VulD...	cvss3_vuldb_e	X		05/01/2019	accepted	90
8930095	05/01/2019	VulD...	cvss2_vuldb_rc	ND		05/01/2019	accepted	90
8930094	05/01/2019	VulD...	cvss2_vuldb_rl	ND		05/01/2019	accepted	90
8930093	05/01/2019	VulD...	cvss2_vuldb_e	ND		05/01/2019	accepted	90
8930092	05/01/2019	VulD...	seealso	134261 134260 134259 134258 134256 134255 134254 134253		05/01/2019	accepted	100
8930091	05/01/2019	VulD...	cve_nvd_summary	doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information.	mitre.org	05/01/2019	accepted	100
8930090	05/01/2019	VulD...	cve_assigned	1556582400	mitre.org	05/01/2019	accepted	100
8930089	05/01/2019	VulD...	cve	CVE-2019-11614	mitre.org	05/01/2019	accepted	100
8930088	05/01/2019	VulD...	price_0day	$0-$5k	see documentation	05/01/2019	accepted	100
8930087	05/01/2019	VulD...	date	1556582400 (04/30/2019)		05/01/2019	accepted	100
8930086	05/01/2019	VulD...	cvss3_nvd_a	N	nist.gov	05/01/2019	accepted	100
8930085	05/01/2019	VulD...	cvss3_nvd_i	N	nist.gov	05/01/2019	accepted	100
8930084	05/01/2019	VulD...	cvss3_nvd_c	H	nist.gov	05/01/2019	accepted	100
8930083	05/01/2019	VulD...	cvss3_nvd_s	U	nist.gov	05/01/2019	accepted	100
8930082	05/01/2019	VulD...	cvss3_nvd_ui	N	nist.gov	05/01/2019	accepted	100