medium4.9
CVE-2019-11624
doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php.
Impact
doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote background administrator privilege user can exploit this vulnerability to delete arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doorgets | Doorgets Cms | Version 7.0 |