s21sec-044-en.txt

S21Sec Advisory - Title: OpenDocMan Cross Site Scripting XSS ID: S21sec-044-en Severity: Low History: 15.Apr.2008 Vulnerability discovered 16.Apr.2008 Vendor contacted 27.May.2008 Patch available Scope: Cross Site Scripting XSS Platforms: Any Author: Sergi Roselló [email protected] URL:...

OpenDocMan 1.x - 'out.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29765/info OpenDocMan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

CVE-2006-5655

SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5655

SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5655

CVE-2006-5655 corresponds to an SQL injection vulnerability in OpenDocMan 1.2p3, where the username parameter is exploitable to allow remote attackers to execute arbitrary SQL commands. The vulnerability is described as affecting index.php and enables manipulation of the backend database. The ava...

opendocman <= 1.2p3 Bypass admin/user Login

opendocman = 1.2p3 Bypass admin/user Login affected to opendocman-1.2rc3 Download Source : http://www.opendocman.com/?pageid=14 Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; index.php bugs; $query = "SELECT id, username, password FROM user WHERE...

opendocman-1.2rc3.txt

opendocman = 1.2rc3 Bypass admin/user Login affected to opendocman-1.2p3 Download Source : http://www.opendocman.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; index.php bugs; $frmuser = $POST'frmuser'; $frmpass = $POST'frmpass'; $query =...

OpenDocMan Access Control Bypass

The remote host is running OpenDocMan, an open source document management system. There is a flaw in the remote version of this software that could allow an attacker with a given account to modify the content of some documents he would otherwise not have access to. %NASLMINLEVEL 70300 C Tenable...