CVE-2019-11625

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
4
MEDIUM
Affected
1
PROJECT

Description

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php. A remote background administrator privilege user (or a user with permission to manage emailing) could exploit the vulnerability to obtain database sensitive information.