CVE-2019-11618
CRITICALdoorgets_cms 7.0 - Unauthenticated Default Administrator Credential Exposure
Title source: llmDescription
doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 access_token in a uri=blog&action=index&controller=blog action to /api/index.php.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/itodaro/doorGets_cve
Scores
CVSS v3
9.8
EPSS
0.0228
EPSS Percentile
80.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-1188
Status
published
Products (1)
doorgets/doorgets_cms
7.0
Published
Apr 30, 2019
Tracked Since
Feb 18, 2026