File and Path Handling

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server…CVE-2019-11608Doorgets · 4.1% likely

   CWE-22

2. doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-s…CVE-2019-11609Doorgets · 4.0% likely

   CWE-22

3. doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-s…CVE-2019-11611Doorgets · 3.9% likely

   CWE-22

4. doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain serve…CVE-2019-11610Doorgets · 3.9% likely

   CWE-22

5. doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-se…CVE-2019-11607Doorgets · 3.9% likely

   CWE-22

6. doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-s…CVE-2019-11606Doorgets · 3.9% likely

   CWE-22

7. doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to delete arbitrary file…CVE-2019-11612Doorgets · 2.7% likely

   CWE-22

8. doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a dg-user/?controller=theme&action=edit&name=doorgets&file=../../1.txt…CVE-2018-20064Doorgets · 2.7% likely

   CWE-22

9. doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote background administrator privilege user can exploit thi…CVE-2019-11624Doorgets · 1.6% likely

   CWE-22

10. /fileman/php/upload.php in doorGets 7.0 has an arbitrary file upload vulnerability. A remote normal registered user can use this vulnerability to upload backdoor files to control…CVE-2019-11615Doorgets · 1.5% likely

    CWE-434

11. routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request.CVE-2019-11626Doorgets · 1.3% likely

    CWE-21

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.