CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Credentials Management
Summary: doorgets 7.0 has a default administrator credential vulnerability. a remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an h0xzlt44fcn1j9ltdfc5xrxhlf30uage1g3czy6i1k9 access_token in a uri=blog&action=index&controller=blog action to /api/index.php.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-04-30
Last Modified Date: 2019-05-01