CVE-2022-0945

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4...

Showdoc 2.10.3 Cross Site Scripting

Exploit Title: Showdoc 2.10.3 - Stored Cross-Site Scripting XSS Exploit Author: Akshay Ravi Vendor Homepage: https://github.com/star7th/showdoc Software Link: https://github.com/star7th/showdoc/releases/tag/v2.10.3 Version: alert1" 2. Login to showdoc v2.10.2 and go to file library Endpoint =...

Showdoc 2.10.3 - Stored Cross-Site Scripting Vulnerability

Exploit Title: Showdoc 2.10.3 - Stored Cross-Site Scripting XSS Exploit Author: Akshay Ravi Vendor Homepage: https://github.com/star7th/showdoc Software Link: https://github.com/star7th/showdoc/releases/tag/v2.10.3 Version: alert1" 2. Login to showdoc v2.10.2 and go to file library Endpoint =...

Showdoc 2.10.3 - Stored Cross-Site Scripting (XSS)

Exploit Title: Showdoc 2.10.3 - Stored Cross-Site Scripting XSS Exploit Author: Akshay Ravi Vendor Homepage: https://github.com/star7th/showdoc Software Link: https://github.com/star7th/showdoc/releases/tag/v2.10.3 Version: alert1" 2. Login to showdoc v2.10.2 and go to file library Endpoint =...

Showdoc XSS Vulnerability

ShowDoc v1.8.0 has XSS via a new page...

GHSA-2263-JWGM-WV97 Showdoc XSS Vulnerability

ShowDoc v1.8.0 has XSS via a new page...

GHSA-6XX7-CPHV-PXGR Showdoc Forced Browsing

ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified pageid, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL...

Showdoc Forced Browsing

ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified pageid, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL...

GHSA-3P87-GQW8-4PF2 Showdoc CSRF Vulnerability

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

Showdoc CSRF Vulnerability

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

GHSA-PFRC-5HHQ-6HVR Showdoc Unauthenticated Access

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...

Showdoc Unauthenticated Access

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...

Unrestricted File Upload

showdoc/showdoc allows unrestricted file uploads. An attacker is able to login to the admin panel and obtains server privileges via the unrestricted file upload vulnerability in AdminUpdateController.class.php...

Unrestricted Upload of File with Dangerous Type in ShowDoc

There is a Unrestricted Upload of File vulnerability in ShowDoc prior to version 2.10.4...

GHSA-XP82-JMW8-MJXP Unrestricted Upload of File with Dangerous Type in ShowDoc

There is a Unrestricted Upload of File vulnerability in ShowDoc prior to version 2.10.4...

Cross-site Scripting (XSS)

showdoc/showdoc is vulnerable to stored cross-site scripting. The vulnerability exists due to lack of xss validations for uploaded OFD files before they get stored which allows an attacker to inject and execute arbitrary javascript...

CVE-2022-1034

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-1034

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4...

Unrestricted file upload

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-1034 There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4...