deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10310
Published: 2019-04-30
Description: A cross-site request forgery vulnerability in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doTestTowerConnection form validation method allowed attackers permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1355
CVE: CVE-2019-10311
Published: 2019-04-30
Description: A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doTestTowerConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1355
CVE: CVE-2019-10312
Published: 2019-04-30
Description: A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doFillTowerCredentialsIdItems method allowed attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1355
CVE: CVE-2019-10313
Published: 2019-04-30
Description: Jenkins Twitter Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1143
CVE: CVE-2019-10314
Published: 2019-04-30
Description: Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-936
CVE: CVE-2019-10315
Published: 2019-04-30
Description: Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-443
CVE: CVE-2019-10316
Published: 2019-04-30
Description: Jenkins Aqua MicroScanner Plugin 1.0.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1380
CVE: CVE-2019-10317
Published: 2019-04-30
Description: Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-930
CVE: CVE-2019-10318
Published: 2019-04-30
Description: Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins master where it could be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1390
CVE: CVE-2015-9286
Published: 2019-04-30
Description: Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529; https://github.com/NodeBB/NodeBB/pull/3371; https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625
CVE: CVE-2019-4166
Published: 2019-04-30
Description: IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 158699.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.ibm.com/support/docview.wss?uid=ibm10881404; http://www.securityfocus.com/bid/108121; https://exchange.xforce.ibmcloud.com/vulnerabilities/158699
CVE: CVE-2019-6494
Published: 2019-04-30
Description: IMFForceDelete.sys in IObit Malware Fighter 6.2 allows a low privileged user to send IOCTL 0x8016E000 along with a user defined string to a file; that file will be promptly deleted regardless of access controls.
CVSS Score: 6.5 (MEDIUM)
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-20239
Published: 2019-04-30
Description: Application Links before version 5.0.11, from version 5.1.0 before 5.2.10, from version 5.3.0 before 5.3.6, from version 5.4.0 before 5.4.12, and from version 6.0.0 before 6.0.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the applinkStartingUrl parameter. The product is used as a plugin in various Atlassian products where the following are affected: Confluence before version 6.15.2, Crucible before version 4.7.0, Crowd before version 3.4.3, Fisheye before version 4.7.0, Jira before version 7.13.3 and 8.x before 8.1.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://ecosystem.atlassian.net/browse/APL-1373; https://jira.atlassian.com/browse/CONFSERVER-58208; https://jira.atlassian.com/browse/CRUC-8379
CVE: CVE-2019-3399
Published: 2019-04-30
Description: The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-862
References: https://jira.atlassian.com/browse/JRASERVER-69246; https://jira.atlassian.com/browse/JRASERVER-69246
CVE: CVE-2019-10948
Published: 2019-04-30
Description: Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X are susceptible to a denial-of-service condition as a result of an overflow of TCP packets, which requires the device to be manually rebooted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01; https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01
CVE: CVE-2019-10950
Published: 2019-04-30
Description: Fujifilm FCR Capsula X/ Carbon X/ FCR XC-2, model versions CR-IR 357 FCR Carbon X, CR-IR 357 FCR XC-2, FCR-IR 357 FCR Capsula X provide insecure telnet services that lack authentication requirements. An attacker who successfully exploits this vulnerability may be able to access the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-306
References: http://www.securityfocus.com/bid/108052; https://ics-cert.us-cert.gov/advisories/ICSMA-19-113-01; http://www.securityfocus.com/bid/108052
CVE: CVE-2019-5624
Published: 2019-04-30
Description: Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of Metasploit. Exploiting this vulnerability can allow an attacker to execute arbitrary code in Metasploit at the privilege level of the user running Metasploit. This issue affects: Rapid7 Metasploit Framework version 4.14.0 and prior versions.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22, CWE-22
References: https://blog.doyensec.com/2019/04/24/rubyzip-bug.html; https://github.com/rapid7/metasploit-framework/pull/11716; https://help.rapid7.com/metasploit/release-notes/archive/2019/04/#20190416
CVE: CVE-2018-19374
Published: 2019-04-30
Description: Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a reboot) by placing a Trojan horse file into the permissive bin directory.
CVSS Score: 7.0 (HIGH)
CWE: CWE-732
References: https://research.digitalinterruption.com/2019/04/15/privilege-escalation-in-manageengine-admanager-plus-6/; https://research.digitalinterruption.com/2019/04/15/privilege-escalation-in-manageengine-admanager-plus-6/
CVE: CVE-2018-20509
Published: 2019-04-30
Description: The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/Yellow-Pay/CVE/blob/master/CVE-2018-20509.md; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03902.html
CVE: CVE-2018-20510
Published: 2019-04-30
Description: The print_binder_transaction_ilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "*from *code *flags" lines in a debugfs file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/108125; https://github.com/Yellow-Pay/CVE/blob/master/CVE-2018-20510; http://www.securityfocus.com/bid/108125
CVE: CVE-2019-10272
Published: 2019-04-30
Description: An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: https://expzh.com/Weaver-e-cology9.0-CRLF-Injection.pdf; https://www.weaver.com.cn/cs/securityDownload.asp; https://expzh.com/Weaver-e-cology9.0-CRLF-Injection.pdf
CVE: CVE-2019-9621
Published: 2019-04-30
Description: Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: http://packetstormsecurity.com/files/152487/Zimbra-Collaboration-Autodiscover-Servlet-XXE-ProxyServlet-SSRF.html; http://packetstormsecurity.com/files/153190/Zimbra-XML-Injection-Server-Side-Request-Forgery.html; http://www.rapid7.com/db/modules/exploit/linux/http/zimbra_xxe_rce
CVE: CVE-2018-14874
Published: 2019-04-30
Description: An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp and /references/refbranu.jsp is mishandled before being used in SQL queries, allowing SQL injection with an authenticated session.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://neetech18.blogspot.com/2019/03/error-based-sql-injection-vulnerability.html; https://neetech18.blogspot.com/2019/03/error-based-sql-injection-vulnerability.html
CVE: CVE-2018-14875
Published: 2019-04-30
Description: An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://neetech18.blogspot.com/2019/03/reflected-xss-vulnerability-in-polaris.html; https://neetech18.blogspot.com/2019/03/reflected-xss-vulnerability-in-polaris.html
CVE: CVE-2018-14930
Published: 2019-04-30
Description: An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. CSRF can occur via a /CollatWebApp/gcmsRefInsert?name=SUPP URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software.html; https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software.html
CVE: CVE-2018-14931
Published: 2019-04-30
Description: An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exists via a /IntellectMain.jsp?IntellectSystem= URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software_31.html; https://neetech18.blogspot.com/2019/03/polaris-intellect-core-banking-software_31.html
CVE: CVE-2018-15206
Published: 2019-04-30
Description: BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://neetech18.blogspot.com/2019/03/cross-site-request-forgery-smartvista.html; https://neetech18.blogspot.com/2019/03/cross-site-request-forgery-smartvista.html
CVE: CVE-2018-15207
Published: 2019-04-30
Description: BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://neetech18.blogspot.com/2019/03/incorrect-access-control-smart-vista.html; https://neetech18.blogspot.com/2019/03/incorrect-access-control-smart-vista.html
CVE: CVE-2018-15208
Published: 2019-04-30
Description: BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: https://neetech18.blogspot.com/2019/03/session-fixation-smart-vista-svfe-2.html; https://neetech18.blogspot.com/2019/03/session-fixation-smart-vista-svfe-2.html
CVE: CVE-2018-20834
Published: 2019-04-30
Description: A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. A patch has been applied to node-tar v2.2.2).
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: https://access.redhat.com/errata/RHSA-2019:1821; https://github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d; https://github.com/npm/node-tar/commit/b0c58433c22f5e7fe8b1c76373f27e3f81dcd4c8
CVE: CVE-2018-20835
Published: 2019-04-30
Description: A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/mafintosh/tar-fs/commit/06672828e6fa29ac8551b1b6f36c852a9a3c58a2; https://github.com/mafintosh/tar-fs/compare/d590fc7...a35ce2f; https://hackerone.com/reports/344595
CVE: CVE-2019-10131
Published: 2019-04-30
Description: An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.
CVSS Score: 7.1 (HIGH)
CWE: CWE-193, CWE-193
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html; http://www.securityfocus.com/bid/108117
CVE: CVE-2019-11193
Published: 2019-04-30
Description: The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESELLER; an attacker can bypass the CSRF protection with this, and take over the administration panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: http://packetstormsecurity.com/files/152494/DirectAdmin-1.561-Cross-Site-Scripting.html; https://numanozdemir.com/respdisc/directadmin.pdf; https://www.exploit-db.com/exploits/46694
CVE: CVE-2019-9486
Published: 2019-04-30
Description: STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. An attacker can inject and execute code by hijacking the insecure communications with the service. This vulnerability also affects Telekom MagentaCLOUD through 5.7.0.0 and 1&1 Online Storage through 6.1.0.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-367
References: https://zer0-day.pw/articles/2019-04/HiDrive-LPE-via-Insecure-WCF-endpoint; https://zer0-day.pw/articles/2019-04/HiDrive-LPE-via-Insecure-WCF-endpoint
CVE: CVE-2019-11606
Published: 2019-04-30
Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-862
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11607
Published: 2019-04-30
Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-862
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11608
Published: 2019-04-30
Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22, CWE-862
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11609
Published: 2019-04-30
Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22, CWE-862
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11610
Published: 2019-04-30
Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-862
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11611
Published: 2019-04-30
Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-862
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11612
Published: 2019-04-30
Description: doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to delete arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11613
Published: 2019-04-30
Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/contactView.php. A remote normal registered user could exploit the vulnerability to obtain database sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11614
Published: 2019-04-30
Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11615
Published: 2019-04-30
Description: /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11616
Published: 2019-04-30
Description: doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated attacker could exploit this vulnerability to obtain the administrator password.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11617
Published: 2019-04-30
Description: doorGets 7.0 has a CSRF vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote attacker can exploit this vulnerability for "Google Analytics code" modification.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11618
Published: 2019-04-30
Description: doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 access_token in a uri=blog&action=index&controller=blog action to /api/index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11619
Published: 2019-04-30
Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics. A remote background administrator privilege user (or a user with permission to manage configuration analytics) could exploit the vulnerability to obtain database sensitive information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11620
Published: 2019-04-30
Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user (or a user with permission to manage modulecategory) could exploit the vulnerability to obtain database sensitive information via modulecategory_add_titre.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve
CVE: CVE-2019-11621
Published: 2019-04-30
Description: doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. A remote background administrator privilege user (or a user with permission to manage network configuration) could exploit the vulnerability to obtain database sensitive information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/itodaro/doorGets_cve; https://github.com/itodaro/doorGets_cve