522 matches found
CVE-2021-3683 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3775
ShowDoc is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2021-3775). Technical notes across CNVD indicate the issue stems from inadequate filtering/restriction of cookies in UserController.class.php, enabling CSRF exploitation. The vulnerability is documented across multiple ...
CVE-2021-3775 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3776
CVE-2021-3776 corresponds to a CSRF vulnerability in the open-source tool ShowDoc. Multiple connected sources (CNVD-2021-89160, RH/CVE-2021-3776, OSV, CNVD/CNNVD, CVE listings) corroborate that ShowDoc is vulnerable to CSRF, stemming from insufficient filtering/restriction of cookies in the softw...
CVE-2021-3776 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
showdoc 跨站请求伪造漏洞
ShowDoc is an open source tool for IT teams to share documents online.ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, which can be exploited by attackers to cause a...
showdoc 跨站请求伪造漏洞
ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...
CVE-2021-3683: Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3776: Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3775: Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-4286-H47H-M5V6 Showdoc File Upload Vulnerability
A file upload vulnerability exists in Showdoc 2.8.3, which can be exploited by an attacker to gain server privileges...
Showdoc File Upload Vulnerability
A file upload vulnerability exists in Showdoc 2.8.3, which can be exploited by an attacker to gain server privileges...
Arbitrary File Upload
showdoc/showdoc is vulnerable to arbitrary file upload attacks. An unauthenticated attacker is able to obtain unauthorized server permissions via arbitrary file uploads...
CVE-2021-41745
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...
CVE-2021-41745
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...
Design/Logic Flaw
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...
CVE-2021-41745
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...
CVE-2021-41745
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions...
CVE-2021-41745
CVE-2021-41745 corresponds to a file upload vulnerability in ShowDoc 2.8.3. The connected sources describe an issue where exploitation allows an attacker to obtain server privileges. Affected product: ShowDoc 2.8.3; vulnerable component: file upload handling. Underlying root cause is described as...