CVE-2021-3775

ShowDoc is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2021-3775). Technical notes across CNVD indicate the issue stems from inadequate filtering/restriction of cookies in UserController.class.php, enabling CSRF exploitation. The vulnerability is documented across multiple ...

CVE-2021-3775 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776

CVE-2021-3776 corresponds to a CSRF vulnerability in the open-source tool ShowDoc. Multiple connected sources (CNVD-2021-89160, RH/CVE-2021-3776, OSV, CNVD/CNNVD, CVE listings) corroborate that ShowDoc is vulnerable to CSRF, stemming from insufficient filtering/restriction of cookies in the softw...

showdoc 跨站请求伪造漏洞

ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...

showdoc 跨站请求伪造漏洞

ShowDoc is an open source tool for IT teams to share documents online.ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, which can be exploited by attackers to cause a...

GHSA-4286-H47H-M5V6 Showdoc File Upload Vulnerability

A file upload vulnerability exists in Showdoc 2.8.3, which can be exploited by an attacker to gain server privileges...

Showdoc File Upload Vulnerability

A file upload vulnerability exists in Showdoc 2.8.3, which can be exploited by an attacker to gain server privileges...

Arbitrary File Upload

showdoc/showdoc is vulnerable to arbitrary file upload attacks. An unauthenticated attacker is able to obtain unauthorized server permissions via arbitrary file uploads...

CVE-2021-41745

ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...

CVE-2021-41745

ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...

Design/Logic Flaw

ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...

CVE-2021-41745

ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...

CVE-2021-41745

CVE-2021-41745 corresponds to a file upload vulnerability in ShowDoc 2.8.3. The connected sources describe an issue where exploitation allows an attacker to obtain server privileges. Affected product: ShowDoc 2.8.3; vulnerable component: file upload handling. Underlying root cause is described as...

CVE-2021-41745

ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...

showdoc 代码问题漏洞

showdoc is open source a great tool for IT teams to share documents online. ShowDoc has a security vulnerability that can be exploited by attackers to gain server privileges...

in star7th/showdoc

Firstly, I would say to the dev, your application Showdoc is good to use, and I will keep an eye on it, continuously improving the safety of it. Then, I would also thank the staff in huntr.dev, your quick response impressed me a lot. ​ Good to work with you enthusiastic people. ​ Description ​...

ShowDoc Unrestricted File Upload (CVE-2021-36440)

An unrestricted file upload vulnerability exists in ShowDoc. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

GHSA-C442-3278-RHRG Unrestricted File Upload in ShowDoc v2.9.5

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...

Unrestricted File Upload in ShowDoc v2.9.5

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'fileurl' parameter in the component AdminUpdateController.class.php'...