Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9wpw-m2hh-6867

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user (or a user with permission to manage configuration siteweb) could exploit the vulnerability to obtain database sensitive information.

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user (or a user with permission to manage configuration siteweb) could exploit the vulnerability to obtain database sensitive information.

EPSS

Процентиль: 49%
0.00261
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 4.9
nvd
почти 7 лет назад

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user (or a user with permission to manage configuration siteweb) could exploit the vulnerability to obtain database sensitive information.

EPSS

Процентиль: 49%
0.00261
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-89