597 matches found
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3775
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3680
showdoc is vulnerable to Missing Cryptographic Step...
Unrestricted File Upload
showdoc/showdoc is vulnerable to unrestricted file upload. The vulnerability is due to improper validation of file extensions, allowing execution of arbitrary PHP code and leading to remote code execution...
CVE-2025-0520
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
ShowDoc unrestricted file upload vulnerability
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7...
GHSA-6JMR-R7P6-F5WR ShowDoc unrestricted file upload vulnerability
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7...
Arbitrary File Upload
Overview showdoc/showdoc is a tool for an IT team to share documents online. Affected versions of this package are vulnerable to Arbitrary File Upload due to the uploadImg method in the PageController class, which improperly validates file extensions. An attacker can execute arbitrary code by...
CVE-2025-0520
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
CVE-2025-0520
CVE-2025-0520 is an unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extensions, enabling execution of arbitrary PHP and remote code execution on affected installations (ShowDoc versions before 2.8.7). Public reports indicate exploitation in the wild, includ...
CVE-2025-0520
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
CVE-2025-0520 ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
PT-2025-18203
Name of the Vulnerable Software and Affected Versions ShowDoc versions prior to 2.8.7 Description An unrestricted file upload issue exists due to improper validation of file extensions, allowing unauthenticated attackers to upload arbitrary PHP files. This can lead to remote code execution and th...
ShowDoc Code Issues and Vulnerabilities
ShowDoc is a great tool for IT teams to share documents online by star7th individual developers. A code issue vulnerability exists in ShowDoc versions prior to 2.8.7 that stems from improper validation of file extensions and could lead to remote code execution...
CVE-2025-0520: Unrestricted Upload of File with Dangerous Type
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7...
CVE-2021-4017
showdoc is vulnerable to Cross-Site Request Forgery CSRF...