KnowledgeTree OSS 3.0.3b Cross Site Scripting

KnowledgeTree OSS 3.0.3b Reflected XSS Cross-site Scripting Web Application 0-Day Security Bug Exploit Title: KnowledgeTree login.php &errorMessage parameter Reflected XSS Web Security Vulnerability Product: Knowledge Tree Document Management System Vendor: Knowledge Inc Vulnerable Versions: OSS...

GE Healthcare Centricity DMS Trust Management Vulnerability

GE Healthcare Centricity DMS is a General Electric GE cardiology clinical education data management system for the healthcare industry. A security vulnerability exists in GE Healthcare Centricity DMS that originates from a Museadmin user using 'Muse!Admin' as a password. An attacker could exploit...

The vulnerability of the IBM Domino electronic document management system allows a perpetrator to execute arbitrary code.

The vulnerability of the IBM Domino electronic document management system arises due to a buffer overflow error. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using a specially crafted BMP image...

The vulnerability of the IBM Domino electronic document management system allows a perpetrator to execute arbitrary code.

The vulnerability of the IBM Domino electronic document management system arises due to a buffer overflow error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted BMP image...

致远A8-m企业版v3.20SP1协同管理软件几个小问题打包

简要描述： 本次发现致远A8-m企业版v3.20SP1协同管理软件中的几个小问题，如下： 1.公文管理功能中的文件夹权限越权管理； 2.越权查看指定用户的待办业务（只能查看标题，内容无法访问）； 3.指定后缀文件上传。 详细说明： 1.公文管理功能中的文件夹权限越权管理 在公文管理功能中，高权限的用户可以在文件夹的属性中指定该文件夹的访问权限。但是在操作过程中，用户可以通过修改链接中的关键参数实现对文件夹权限的控制。 下图为正常权限中用户对文件夹属性的访问截图 下图为修改关键参数截图，将参数中的false改为true即可激活相应的权限控制 下图为修改权限之后的访问截图...

Openkm Document Management System 6.4.17 Cross Site Scripting

Openkm Document Management System Suffers From Cross Site Scripting Attack http://khalil-shreateh.com/khalil.shtml/images/articles/websites/vulnerabili ties/openkm.jpg Version Khalil Shreateh Auther Website: http://khalil-shreateh.com Status : Reported . Report Link :...

CVE-2014-8660

SAP Document Management Services allows local users to execute arbitrary commands via unspecified vectors...

Command injection

SAP Document Management Services allows local users to execute arbitrary commands via unspecified vectors...

CVE-2014-8660

Technical details (affected products, versions, root cause, exploit info, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2014-8660

SAP Document Management Services allows local users to execute arbitrary commands via unspecified vectors...

Feng Office - Persistent Cross-Site Scripting

Feng Office - Persistent Cross-Site Scripting Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document...

Feng Office - Persistent Cross-Site Scripting

Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management, Tasks, E-mails, Documents, Interna...

OpenDocMan 1.2.6.5 - Persistent XSS Vulnerability

No description provided by source. Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS Date: 05/04/2013 Exploit Author: drone @dronesec More Exploit Information: Vendor Homepage: http://www.opendocman.com/ Software Link:...

Gatesoft Docusafe 4.1.0 - SQL Injection Vulnerability

No description provided by source. Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com,...

OpenDocMan 1.2.5 xss, SQL injection

No description provided by source. Security Advisory : Multiple vulnerabilities in OpenDocMan Discovered by == Amol Naik amolnaik4atgmail.com Overview -------------- OpenDocMan is a free document management system DMS designed to comply with ISO 17025 and OIE standard for document management. It...

Multiple Stored XSS in Mayan-EDMS web-based document management OS system

No description provided by source. Exploit Title: Multiple Stored XSS Software: Maya EDMS Software Link: http://www.mayan-edms.com/downloads/Mayan%20EDMS%20v0.13.ova Version: 0.13 - latest Author: Dolev Farhi, email: dolevatopenflaredotorg @f1nhack Date: 21.5.2014 Tested on: Kali Linux Vendor...

Omnidocs - Multiple Vulnerability

No description provided by source. -------------------------------------------------------------------- Exploit Title: Multiple Vulnerability in Omnidocs Date: 24 Sep 2011 Author: Sohil Garg Software Link: http://www.newgensoft.com/omnidocs.asp Version: All Tested on: Apache-Coyote/1.1 CVE :...

Kordil EDMS 2.2.60rc3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability Date: 12/05/2012 Exploit Author: Woody Hughes [email protected] Vendor Homepage: http://sourceforge.net/projects/kordiledms/ Software Link:...

XODA Document Management System 0.4.5 - XSS & Arbitrary File Upload

No description provided by source. Exploit Title: XODA Document Management System Stored XSS & Arbitrary File Upload Vulnerability. Date: 21/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://xoda.org/ Software Link: http://sourceforge.net/projects/xoda/files/xoda/xoda-0.4.5/...

BrightSuite Groupware SQL Injection Vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...