Approved changes feed: RSS · Atom

cpe:2.3:a:doorgets:doorgets_cms:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorDoorgets (fe7293c7-3aa3-5d79-97d8-e20a8ec6dda9)
ProductDoorgets Cms (39b9e8a5-3838-5323-a07f-756f065657ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/doorgets/cms purl2cpe 2026-06-01 10:17:37.244069

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1459 vulnerable 2026-06-08 05:05:24.685605 Details available
SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the _position_down_id parameter. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.
Published: 2014-02-11T17:00:00.000Z
Updated: 2024-08-06T09:42:35.432Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.