CVE-2014-1459

doorGets CMS <= 5.2 - Authenticated SQL Injection via _position_down_id Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-1459. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary This PoC demonstrates a SQL Injection vulnerability in doorGets CMS via the '_position_down_id' parameter, exploitable via CSRF. It uses DNS exfiltration to extract database information, such as the MySQL version, by forcing a DNS lookup to an attacker-controlled domain.

Description

SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the _position_down_id parameter. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.

Exploits (1)

exploitdb WORKING POC

by High-Tech Bridge SA · textwebappsphp

https://www.exploit-db.com/exploits/31521

View Code ZIP pw:eip

This PoC demonstrates a SQL Injection vulnerability in doorGets CMS via the '_position_down_id' parameter, exploitable via CSRF. It uses DNS exfiltration to extract database information, such as the MySQL version, by forcing a DNS lookup to an attacker-controlled domain.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: doorGets CMS 5.2 and prior

No auth needed

Prerequisites: Victim must visit a malicious page or be tricked into submitting the form · Attacker must control a DNS server to capture exfiltrated data

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component T1530 - Data from Cloud Storage

devstral-2 · analyzed Feb 16, 2026 Full analysis →