CVE-2014-1459: SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticat...

Security readout for executives and security teams

doorGets CMS 5.2 and earlier has an SQL injection flaw in its admin area. An authenticated administrator could alter database queries, and the CVE notes the issue may be triggered through CSRF. That raises business risk for sites still running this old CMS, especially where admin sessions are exposed to untrusted web content. Exposure is most likely on legacy doorGets CMS 5.2 or earlier deployments with reachable dg-admin functionality. Risk is higher where administrators browse while authenticated or where admin access is internet-facing. The provided affected metadata is sparse, so confirm actual installed version and codebase lineage. Prioritize remediation if doorGets CMS is still used, because the flaw can affect database integrity and confidentiality. This is an older CMS issue, so many organizations will have no exposure. The key decision is rapid inventory first, then patch, isolate, or retire any confirmed affected deployments. Mitigation focus: Identify any doorGets CMS deployments and confirm whether versions are 5.2 or earlier.; Review the linked doorGets commit and vendor guidance for the intended fixed code path.; Upgrade or patch affected installations using vendor-supported guidance where available..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.