51 matches found
Unrestricted File Upload
showdoc/showdoc is vulnerable to unrestricted file upload. The vulnerability is due to improper validation of file extensions, allowing execution of arbitrary PHP code and leading to remote code execution...
CVE-2025-0520
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
Arbitrary File Upload
Overview showdoc/showdoc is a tool for an IT team to share documents online. Affected versions of this package are vulnerable to Arbitrary File Upload due to the uploadImg method in the PageController class, which improperly validates file extensions. An attacker can execute arbitrary code by...
GHSA-6JMR-R7P6-F5WR ShowDoc unrestricted file upload vulnerability
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7...
ShowDoc unrestricted file upload vulnerability
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7...
CVE-2025-0520
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
CVE-2025-0520
CVE-2025-0520 is an unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extensions, enabling execution of arbitrary PHP and remote code execution on affected installations (ShowDoc versions before 2.8.7). Public reports indicate exploitation in the wild, includ...
CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
PT-2025-18203
Name of the Vulnerable Software and Affected Versions ShowDoc versions prior to 2.8.7 Description An unrestricted file upload issue caused by improper validation of file extensions allows unauthenticated attackers to upload arbitrary PHP files, such as web shells, leading to remote code execution...
CVE-2022-0965
Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4...
CVE-2022-0942
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4...
showdoc 跨站脚本漏洞
showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .webmv file extensions in the application's file upload feature. An attacker could exploit this...
CVE-2022-0962
Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4...
Arbitrary File Upload
showdoc/showdoc is vulnerable to arbitrary file upload attacks. The vulnerability exists through AttachmentController.class.php where the attachmentUpload function does not properly validate the upload files, allowing an attacker to upload a malicious crafted file and remotely execute arbitrary...
GHSA-5MJ6-3CMQ-FH34 showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
showdoc 安全漏洞
ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...
ShowDoc Input Validation Error Vulnerability (CNVD-2021-95596)
ShowDoc is open source a great tool for IT teams to share documents online. ShowDoc suffers from an input validation error vulnerability that stems from showdoc's susceptibility to URL redirection to untrusted sites. No detailed vulnerability details are provided at this time...