Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting via viva cshtm file upload in in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

GHSA-RPHC-H572-2X9F Cross-site Scripting in showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online. showdoc/showdoc allows .properties files to upload which lead to stored XSS in versions prior to 2.10.4. This allows attackers to execute malicious scripts in the user's browser. This issue was patched in version 2.10....

Cross-site Scripting in showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online. showdoc/showdoc allows .properties files to upload which lead to stored XSS in versions prior to 2.10.4. This allows attackers to execute malicious scripts in the user's browser. This issue was patched in version 2.10....

GHSA-PCCM-J6VJ-JWWF Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webma file upload...

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webma file upload...

showdoc 跨站脚本漏洞

showdoc is an open source tool ideal for IT teams to share documents online. A security vulnerability exists in the GitHub repository star7th/showdoc prior to version 2.4.10, which stems from a cross-site scripting vulnerability via file upload...

CVE-2022-0964: Improper Neutralization of Input During Web Page Generation

Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4...

showdoc 跨站脚本漏洞

showdoc is open source and a great tool for IT teams to share documents online. showdoc versions prior to 2.10.4 have a security vulnerability that stems from the application allowing the upload of .ofd files, which leads to a cross-site scripting vulnerability. No detailed vulnerability details...

CVE-2022-0967: Improper Neutralization of Input During Web Page Generation

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4...

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .aspx file extensions in the application's file upload functionality. An attacker could use this...

CVE-2022-0957: Improper Neutralization of Input During Web Page Generation

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0956: Improper Neutralization of Input During Web Page Generation

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4...

CVE-2022-0942: Improper Neutralization of Input During Web Page Generation

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0950: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4...

CVE-2022-0965: Improper Neutralization of Input During Web Page Generation

Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4...

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .m3u8a file extensions in the application's file upload feature. An attacker could exploit this...

CVE-2022-0951: Unrestricted Upload of File with Dangerous Type

File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4...

showdoc 代码问题漏洞

showdoc is open source a great tool for IT teams to share documents online. A code issue vulnerability exists in showdoc before 2.10.4, which stems from unrestricted file uploads...

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .webmv file extensions in the application's file upload feature. An attacker could exploit this...

showdoc跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .cshtml and .axd file extensions in the application's file upload functionality. An attacker could exploit th...