202 matches found
OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting
Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS Date: 05/04/2013 Exploit Author: drone @dronesec More Exploit Information: Vendor Homepage: http://www.opendocman.com/ Software Link: http://sourceforge.net/projects/opendocman/files/opendocman/1.2.6.5/opendocman-1.2.6.5.zip/download Version...
OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting
OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS Date: 05/04/2013 Exploit Author: drone @dronesec More Exploit Information: Vendor Homepage: http://www.opendocman.com/ Software Link:...
OpenDocMan 1.2.6.2 - 3 Vulnerabilities
1 - Unprotected id parameter ----------------------------- In check-in.php the id variable is not filtered so that one can put in additional SQL statements. I have been able to get a UNION SELECT query to run but I do not think it's exploitable because there is a second query that runs with the i...
OpenDocMan 1.2.6.1 Cross Site Request Forgery
Exploit Title: OpenDocMan Password Change CSRF Date: 22/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.opendocman.com/ Software Link: https://github.com/downloads/opendocman/opendocman/opendocman-1.2.6.1.tar.gz Version: 1.2.6.1 Gr33Tz: @aviadgolan , @benhayak,...
OpenDocMan 1.2.6.1 - Cross-Site Request Forgery (Password Change)
OpenDocMan 1.2.6.1 - Cross-Site Request Forgery Password Change Exploit Title: OpenDocMan Password Change CSRF Date: 22/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.opendocman.com/ Software Link:...
OpenDocMan 1.2.6.1 - Cross-Site Request Forgery (Password Change)
Exploit Title: OpenDocMan Password Change CSRF Date: 22/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.opendocman.com/ Software Link: https://github.com/downloads/opendocman/opendocman/opendocman-1.2.6.1.tar.gz Version: 1.2.6.1 Gr33Tz: @aviadgolan , @benhayak,...
OpenDocMan v1.2.6.1 Password Change CSRF
Exploit for php platform in category web applications Exploit Title: OpenDocMan Password Change CSRF Date: 22/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.opendocman.com/ Software Link: https://github.com/downloads/opendocman/opendocman/opendocman-1.2.6.1.tar.gz...
CVE-2011-3764
OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by UserPermsclass.php and certain other files...
Information disclosure
OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by UserPermsclass.php and certain other files...
PT-2011-4654
Name of the Vulnerable Software and Affected Versions OpenDocMan version 1.2.6-svn-2011-01-21 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example,...
CVE-2011-3764
OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by UserPermsclass.php and certain other files...
CVE-2011-3764
CVE-2011-3764 affects OpenDocMan 1.2.6-svn-2011-01-21. The issue is an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting certain PHP files, causing error messages that reveal the installation path (e.g., User_Perms_class.php). There is no...
CVE-2011-3764: Exposure of Sensitive Information to an Unauthorized Actor
OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by UserPermsclass.php and certain other files...
OpenDocMan Multiple XSS and SQL Injection Vulnerabilities
This host is running OpenDocMan and is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodopendocmanxssnsqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenDocMan Multiple XSS and SQL Injection Vulnerabilities Authors: Sharath S...
OpenDocMan Version Detection
This script detects the installed OpenDocMan version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenDocMan Multiple XSS and SQL Injection Vulnerabilities
OpenDocMan is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Sql injection
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass aka Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-3801
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass aka Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-3801
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass aka Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-3801
OpenDocMan 1.2.5 is affected by a SQL injection in index.php triggered through the frmpass parameter, enabling remote attackers to execute arbitrary SQL commands. This is corroborated by multiple sources in the connected set (NVD entry and OpenVAS/Red Hat redundancy). Root cause centers on improp...