Arbitrary File Upload

showdoc/showdoc is vulnerable to arbitrary file upload attacks. The vulnerability exists through AttachmentController.class.php where the attachmentUpload function does not properly validate the upload files, allowing an attacker to upload a malicious crafted file and remotely execute arbitrary...

GHSA-6X3J-X9RP-WHXP Unrestricted Upload of File with Dangerous Type in showdoc

showdoc prior to 2.10.2 is vulnerable to Unrestricted Upload of File with Dangerous Type...

Unrestricted Upload of File with Dangerous Type in showdoc

showdoc prior to 2.10.2 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2022-0409

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

CVE-2022-0409

CVE-2022-0409 affects showdoc/showdoc prior to version 2.10.2. Multiple connected sources (Red Hat, OSV, CVE trackers) describe an unrestricted upload of files with dangerous types as the underlying issue in the Packagist showdoc project. The vulnerability enables attackers to upload arbitrary fi...

CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

showdoc 代码问题漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a code issue vulnerability that stems from unrestricted uploading of files with dangerous types. No details of the vulnerability are currently available...

CVE-2022-0409: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

GHSA-7X22-PMW5-66MQ Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...

Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...

showdoc uid Parameter SQL Injection Vulnerability

showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...

SQL Injection

showdoc/showdoc is vulnerable to SQL Injection attacks. The library does not properly sanitize the uid parameter which is an user input, allowing a malicious user to inject and execute arbitrary SQL queries on the server...

GHSA-9CQ5-XGG4-X477 SQL Injection in showdoc

Showdoc verions 2.10.2 and prior is vulnerable to SQL injection. A patch is available in the master branch of the repository...

SQL Injection in showdoc

Showdoc verions 2.10.2 and prior is vulnerable to SQL injection. A patch is available in the master branch of the repository...

CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

Sql injection

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362

The CVE-2022-0362 vulnerability affects the showdoc/showdoc package (Packagist) versions prior to 2.10.3. The root cause is improper validation of the uid parameter, which enables an SQL injection. This can allow an attacker to execute arbitrary SQL commands with the potential for data exposure o...