showdoc .cshtml file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .cshtml and .axd file extensions in the application's file upload functionality. An attacker could exploit th...

GHSA-VPWQ-6CP4-FFQC Stored Cross-site Scripting in ShowDoc

ShowDoc prior to version 2.10.4 is vulnerable to stored cross-site scripting viva axd and cshtml file upload...

CVE-2022-0945

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4...

showdoc跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .cshtml and .axd file extensions in the application's file upload functionality. An attacker could exploit th...

CVE-2022-0945: Unrestricted Upload of File with Dangerous Type

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4...

PT-2022-13545

Name of the Vulnerable Software and Affected Versions ShowDoc versions prior to 2.10.4 Description The issue concerns a stored cross-site scripting vulnerability via axd and cshtml file upload. This allows for potential malicious script execution when a user uploads specific files. Recommendation...