520 matches found
CVE-2022-0362 SQL Injection in star7th/showdoc
SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...
CVE-2022-0362 SQL Injection in star7th/showdoc
SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...
showdoc SQL注入漏洞
showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...
CVE-2022-0362: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...
SQL Injection in star7th/showdoc
Description The uid parameter does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection. Proof of Concept Time based: POST /server/index.php?s=/api/adminUser/addUser HTTP/1.1 Content-Type: application/x-www-form-urlencoded Accept:...
showdoc cross-site scripting vulnerability
showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code...
CVE-2021-4172
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
CVE-2021-4172
CVE-2021-4172 refers to a Stored XSS in the open-source tool showdoc (GitHub star7th/showdoc) prior to version 2.10.2. Multiple connected sources confirm the vulnerability arises from improper validation of client-side data in the File Library, where uploading an SVG (PoC) can execute script code...
CVE-2021-4172 Cross-site Scripting (XSS) - Stored in star7th/showdoc
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
showdoc 跨站脚本漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code...
CVE-2021-4172: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
GHSA-5MJ6-3CMQ-FH34 showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
GHSA-7VXC-CHQJ-H83G showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
ShowDoc has an unspecified vulnerability
ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...
CVE-2022-0079
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
