CVE-2018-16342

ShowDoc v1.8.0 is affected by a cross-site scripting (XSS) vulnerability via a newly created page. The issue allows injection of arbitrary web script or HTML (as per CNVD/related advisories) and is associated with ShowDoc 1.8.0. The connected documents confirm the vulnerability existence and affe...

CVE-2018-16342

ShowDoc v1.8.0 has XSS via a new page...

ShowDoc v1.8.0 suffers from stored xss vulnerability

ShowDoc is an online document sharing tool that speeds up communication between teams. A stored xss vulnerability exists in ShowDoc v1.8.0 and below, which stems from a failure to filter harmful tags and allows an attacker to obtain a user cookie via an img tag...

File Upload Vulnerability in ShowDoc System

ShowDoc is an online document sharing tool for IT teams. A file upload vulnerability exists in the ShowDoc system. The vulnerability is due to the system failing to check the suffix type of the image upload function, an attacker can use the vulnerability to upload arbitrary files and gain server...