372 matches found
PT-2023-12350 · Seeddms · Seeddms
Name of the Vulnerable Software and Affected Versions: SeedDMS version 6.0.15 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For SeedDMS version 6.0.15, update to a version that includes a fix for thi...
CVE-2021-39421: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2021-39421
A cross-site scripting XSS vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2021-39421
A cross-site scripting XSS vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2021-39421
SeedDMS CVE-2021-39421 is a cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15. The issue allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Public sources in the provided documents identify the vulnerable component as SeedDMS 6.0.15 and corroborate the XS...
CVE-2021-39425
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
CVE-2021-39425
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
CVE-2021-39425
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
Open redirect
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
CVE-2021-39425
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
CVE-2021-39425
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
PT-2023-12351
Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.15 Description The issue allows an attacker to redirect users to arbitrary web URLs by tricking victims into clicking on crafted links. This is achieved through an open redirect vulnerability. Recommendations For SeedDMS...
CVE-2021-39425
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
CVE-2021-39425: URL Redirection to Untrusted Site
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...
SeedDMS input validation error vulnerability
SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used to store and share documents. A security vulnerability exists in SeedDMS version v6.0.15, which stems from an open redirection vulnerability that can b...
CVE-2021-39425
SeedDMS v6.0.15 contains an open redirect vulnerability: an attacker can lure a user into clicking a crafted link to redirect to an arbitrary URL. This affects SeedDMS’s web interface and originates from an open redirect in the application flow. The reported impact is user redirection; no exploit...
CVE-2021-33223
An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...
CVE-2021-33223
An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...