CVE-2025-0520

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...

ShowDoc unrestricted file upload vulnerability

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7...

Arbitrary File Upload

Overview showdoc/showdoc is a tool for an IT team to share documents online. Affected versions of this package are vulnerable to Arbitrary File Upload due to the uploadImg method in the PageController class, which improperly validates file extensions. An attacker can execute arbitrary code by...

GHSA-6JMR-R7P6-F5WR ShowDoc unrestricted file upload vulnerability

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7...

CVE-2025-0520

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...

CVE-2025-0520

CVE-2025-0520 describes an unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extensions, allowing execution of arbitrary PHP and remote code execution on affected installations. The issue affects ShowDoc versions before 2.8.7. Multiple connected sources corro...

CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...

CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...

PT-2025-18203

Name of the Vulnerable Software and Affected Versions ShowDoc versions prior to 2.8.7 Description An unrestricted file upload issue caused by improper validation of file extensions allows unauthenticated attackers to upload arbitrary PHP files, such as web shells, leading to remote code execution...

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .webmv file extensions in the application's file upload feature. An attacker could exploit this...

Arbitrary File Upload

showdoc/showdoc is vulnerable to arbitrary file upload attacks. The vulnerability exists through AttachmentController.class.php where the attachmentUpload function does not properly validate the upload files, allowing an attacker to upload a malicious crafted file and remotely execute arbitrary...

GHSA-5MJ6-3CMQ-FH34 showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

showdoc 安全漏洞

ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...

ShowDoc Input Validation Error Vulnerability (CNVD-2021-95596)

ShowDoc is open source a great tool for IT teams to share documents online. ShowDoc suffers from an input validation error vulnerability that stems from showdoc's susceptibility to URL redirection to untrusted sites. No detailed vulnerability details are provided at this time...

CVE-2021-4000

showdoc is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-4000

showdoc is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

showdoc 跨站请求伪造漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that can be exploited by attackers to perform request forgery CSRF attacks...