OpenDocMan 'ajax_udf.php' Multiple SQL Injection Vulnerabilities

OpenDocMan is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2014-1945

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the addvalue parameter...

CVE-2014-2317

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the table parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the addvalue parameter...

Sql injection

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the table parameter. NOTE: some of these details are obtained from third party information...

CVE-2014-1945

OpenDocMan is affected by CVE-2014-1945: a SQL Injection in the ajax_udf.php script (parameter add_value) allows remote attackers to manipulate the database. Affected product/version: OpenDocMan before 1.2.7.2. Root cause: insufficient input validation in ajax_udf.php leading to arbitrary SQL exe...

CVE-2014-2317

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the table parameter. NOTE: some of these details are obtained from third party information...

CVE-2014-2317

The CVE-2014-2317 issue affects OpenDocMan prior to version 1.2.7.2, where an SQL injection vulnerability exists in ajax_udf.php that allows an attacker to manipulate the database via the table parameter. The vulnerability is described as remote SQL command execution with potential impact on conf...

CVE-2014-1945

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the addvalue parameter...

CVE-2014-1945

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the addvalue parameter...

CVE-2014-1945: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the addvalue parameter...

CVE-2014-2317: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajaxudf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the table parameter. NOTE: some of these details are obtained from third party information...

OpenDocMan 'ajax_udf.php'多个SQL注入漏洞

Bugtraq ID:65775 CVE ID:CVE-2014-1945 OpenDocMan是一款开源基于WEB的文档管理系统。 对通过"addvalue" GET参数和"table" GET提交给ajaxudf.php的输入缺少充分过滤，允许攻击者利用漏洞进行SQL注入攻击，可获得敏感数据库信息或控制应用系统。 0 OpenDocMan 1.2.7.1 厂商补丁： OpenDocMan ----- OpenDocMan 1.2.7.2已经修复该漏洞，建议用户下载更新： http://www.opendocman.com...