CVE-2021-45834

OpenDocMan 1.4.4 is affected by CVE-2021-45834 via add.php, where lack of file-upload restrictions enables MIME-bypass and may allow uploading or transferring dangerous file types. This could be automatically processed in the product environment and potentially lead to arbitrary code execution. R...

PT-2022-12424

Name of the Vulnerable Software and Affected Versions OpenDocMan version 1.4.4 Description An attacker can upload or transfer files of dangerous types to the OpenDocMan portal via the "add.php" endpoint using MIME-bypass. This may lead to arbitrary code execution or automatic processing within th...

CVE-2021-45834: Unrestricted Upload of File with Dangerous Type

An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution...

OpenDocMan Document Management System 1.3.5 Database Disclosure

Exploit Title : OpenDocMan Document Management System 1.3.5 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/04/2019 Vendor Homepage : opendocman.com Software Download Link : opendocman.com/free-download/...

OpenDocMan 1.3.4 SQL Injection

=========================================================================================== Exploit Title: OpenDocMan 1.3.4 - awherea SQL Injection CVE: N/A Date: 05/03/2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/opendocman/files/ Software Link:...

OpenDocMan 1.3.4 - search.php where SQL Injection

OpenDocMan 1.3.4 - search.php where SQL Injection =========================================================================================== Exploit Title: OpenDocMan 1.3.4 - ’where’ SQL Injection CVE: N/A Date: 05/03/2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

OpenDocMan 1.3.4 - (search.php where) SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================================================== Exploit Title: OpenDocMan 1.3.4 - ’where’ SQL Injection Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

Design/Logic Flaw

OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php...

CVE-2014-1946

OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php...

CVE-2014-1946

OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php...

CVE-2014-1946

OpenDocMan vulnerability CVE-2014-1946 affects OpenDocMan versions 1.2.7 and earlier. The issue is improper access control in signup.php, where insufficient validation of allowed actions lets a remote authenticated user assign administrative privileges to their account. The advisory confirms the ...

CVE-2014-1946: Undefined Security Weakness

OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php...

PT-2018-4183

Name of the Vulnerable Software and Affected Versions OpenDocMan versions 1.2.7 and earlier Description The issue allows remote authenticated users to bypass intended access restrictions. This is due to improper validation of allowed actions, enabling users to assign administrative privileges to...

OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability

Document Title: =============== OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1868 Release Date: ============= 2016-07-04 Vulnerability Laboratory ID VL-ID: ==================================== 186...

OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability

Document Title: =============== OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1868 Release Date: ============= 2016-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 186...

OpenDocMan has multiple vulnerabilities

OpenDocMan is OpenDocMan project team developed an open source Web-based PHP document management system DMS. HTML injection and cross-site scripting vulnerabilities exist in OpenDocMan, which can be exploited by attackers to execute arbitrary script code, steal cookie-based authentication or...

Opendocman Cross-Site Request Forgery Vulnerability (CNVD-2016-03274)

OpenDocMan is a versatile Web-based document management system DMS written in PHP and designed to follow the ISO 17025/IEC standard. A cross-site request forgery vulnerability exists in OpenDocMan. Since the program allows users to perform certain actions via unauthenticated HTTP requests, an...

OpenDocMan 1.3.4 - Cross-Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Opendocman 1.3.4 Fixed in: 1.3.5 Fixed Version Link: http://www.opendocman.com/free-download/ Vendor Website: http://www.opendocman.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 11/21/2015...

OpenDocMan 1.3.4 - Cross-Site Request Forgery

OpenDocMan 1.3.4 - Cross-Site Request Forgery Security Advisory - Curesec Research Team 1. Introduction Affected Product: Opendocman 1.3.4 Fixed in: 1.3.5 Fixed Version Link: http://www.opendocman.com/free-download/ Vendor Website: http://www.opendocman.com/ Vulnerability Type: CSRF Remote...

OpenDocMan 1.3.4 - Cross-Site Request Forgery

Exploit for php platform in category web applications 1. Introduction Affected Product: Opendocman 1.3.4 Fixed in: 1.3.5 Fixed Version Link: http://www.opendocman.com/free-download/ Vendor Website: http://www.opendocman.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor:...