Cross site scripting

2017-10-2318:29:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) inc/inc.ClassUI.php or (2) out/out.DocumentNotify.php.

CPENameOperatorVersion
letodmseq3.3.0
letodmseq3.3.1
letodmseq3.3.2
letodmseq3.3.3
letodmseq3.3.4
letodmseq3.3.5
letodmseq3.3.6
letodmseq3.3.7

Name	Operator	Version
letodms	eq	3.3.0
letodms	eq	3.3.1
letodms	eq	3.3.2
letodms	eq	3.3.3
letodms	eq	3.3.4
letodms	eq	3.3.5
letodms	eq	3.3.6
letodms	eq	3.3.7

References

sourceforge.net/p/mydms/code/HEAD/tree/trunk/CHANGELOG

www.openwall.com/lists/oss-security/2012/10/06/1

www.openwall.com/lists/oss-security/2012/10/31/7

www.securityfocus.com/bid/55822