464 matches found
GHSA-M4HJ-WG2R-QPCR showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
Open Redirect in star7th/showdoc
Description Open Redirect at login page due to unchecked "redirect" parameter. Vulnerable parameter redirect Payload /%09/google.com Proof of Concept Send users the following login link https://www.showdoc.com.cn/user/login?redirect=/%09/google.com After users use their registered account to logi...
Cross-site Request Forgery (CSRF)
showdoc/showdoc is vulnerable to cross-site request forgery. The vulnerability exists through the register function in UserController.class.php, allowing an attacker to add any member to the team...
Cross-site Request Forgery (CSRF)
showdoc/showdoc is vulnerable to cross-site request forgery. The server is unable to verify the authenticity of web requests due to a lack of anti-CSRF protection mechanism in the REST API, allowing an attacker to add any member for any item if users visit the attacker site...
Cross-Site Request Forgery (CSRF)
showdoc/showdoc is vulnerable to cross-site request forgery. An attacker can add arbitrary members to the team through the register function in UserController.class.php...
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3683
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3683
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3683
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3683
CVE-2021-3683 affects the ShowDoc project and is described as a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected sources confirm a CSRF issue in ShowDoc and cite the root cause as inadequate cookie handling/filtering in the software (notably in UserController.class.php), enabli...
CVE-2021-3683 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3775
ShowDoc is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2021-3775). Technical notes across CNVD indicate the issue stems from inadequate filtering/restriction of cookies in UserController.class.php, enabling CSRF exploitation. The vulnerability is documented across multiple ...