3 matches found
CVE-2021-36440
Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...
CVE-2021-36440: Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...
PT-2021-21270
Name of the Vulnerable Software and Affected Versions ShowDoc version 2.9.5 Description The issue allows remote attackers to execute arbitrary code via the file url parameter in the AdminUpdateController.class.php component. This enables attackers to upload files without restrictions, potentially...