Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:58 p.m.4 views

CVE-2021-36440

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...

9.8CVSS7.9AI score0.36807EPSS
Exploits1References1
Huntr
Huntr
added 2022/03/20 7:41 a.m.20 views

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3

Description There is a Unrestricted Upload of File vulnerability in AdminUpdateController.class.php in ShowDoc v2.10.3 Proof of Concept POST /showdoc-2.10.3/server/index.php?s=/api/adminUpdate/download HTTP/1.1 Host: 10.211.55.5 Content-Length: 66 Accept: application/json, text/plain, / User-Agen...

6.5CVSS1.1AI score0.00487EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2021/09/09 5:8 p.m.46 views

Unrestricted File Upload in ShowDoc v2.9.5

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...

9.8CVSS9.5AI score0.36807EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/09/09 5:8 p.m.9 views

GHSA-C442-3278-RHRG Unrestricted File Upload in ShowDoc v2.9.5

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...

9.8CVSS9.7AI score0.36807EPSS
Exploits1References4
CNVD
CNVD
added 2021/09/09 12:0 a.m.20 views

ShowDoc file upload vulnerability

ShowDoc is an online API documentation, technical documentation tool ideal for IT teams. showDoc version 2.9.5 is vulnerable to file upload. A remote attacker can exploit this vulnerability to execute arbitrary code via the fileurl parameter in AdminUpdateController.class.php...

9.8CVSS7.1AI score0.36807EPSS
Exploits1References1
NVD
NVD
added 2021/09/08 9:15 p.m.6 views

CVE-2021-36440

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...

9.8CVSS0.36807EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/08 12:0 a.m.2 views

ShowDoc 代码问题漏洞

ShowDoc is an online API documentation, technical documentation tool ideal for IT teams. showDoc version 2.9.5 is vulnerable to file upload. A remote attacker can exploit this vulnerability to execute arbitrary code via the fileurl parameter in AdminUpdateController.class.php...

9.8CVSS6.2AI score0.36807EPSS
Exploits1References2
Rows per page
Query Builder