Vendors / Doorgets Records 24 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 12 CVSS 7.0–8.9
Exploited now Doorgets records in CISA KEV No Doorgets vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00628 · Published 2018-05-15 · No fix listed CWE-352
Priority LOW 38
doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a dg-user/?controller=theme&action=edit&name=doorgets&file=../../1.txt%00 URI with content in the theme_content…
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02655 · Published 2018-12-11 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
Critical2 High12 Medium10 Low0 No CVSS0