high8.8
CVE-2019-11615
/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability.
Impact
/fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doorgets | Doorgets Cms | Version 7.0 |