High severity7.5NVD Advisory· Published Dec 11, 2018· Updated Jun 17, 2026
CVE-2018-20064
CVE-2018-20064
Description
doorGets 7.0 allows remote attackers to write to arbitrary files via directory traversal, as demonstrated by a dg-user/?controller=theme&action=edit&name=doorgets&file=../../1.txt%00 URI with content in the theme_content_nofi parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- github.com/doorgets/CMS/issues/12nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.