OpenDocMain 代码问题漏洞

OpenDocMain is a free PHP document management system DMS. A security vulnerability exists in OpenDocMain version 1.4.4, which stems from the lack of file upload restrictions in add.php. An attacker can use MIME-bypass to exploit this vulnerability to upload dangerous types of files to the portal...

Saraban SQL Injection Vulnerability

Softvibe Saraban is a document management system from Softvibe Thailand. It is used for transferring files and notifications to reduce unnecessary duplication. softvibe Saraban has a SQL injection vulnerability in v1.1, which can be exploited by attackers to execute illegal SQL commands to steal...

Softvibe Saraban SQL注入漏洞

Softvibe Saraban is a document management system from Softvibe Thailand. It is used for transferring files and notifications to reduce unnecessary duplication. softvibe Saraban has a SQL injection vulnerability in v1.1, which can be exploited by attackers to execute illegal SQL commands to steal...

Teedy cross-site scripting vulnerability (CNVD-2022-08344)

Teedy is a French open source, lightweight document management system for individuals and businesses. Teedy suffers from a cross-site scripting vulnerability that stems from the fact that in Teedy, versions v1.5 through v1.9 are susceptible to attacks that store cross-site scripting XSS in the na...

Document Management System 1.0 SQL Injection / Remote Code Execution

Exploit Title: Document Management System - SQL Injection to RCE webshell Date: 23/04/21 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/7652/document-management-system.html Version: 1.0 Tested on: Windows 10 build 19041 + xampp 3.2.4 !/usr/bin/python3 import...

Arbitrary File Read Vulnerability in Doco Document Management System (CNVD-2021-27651)

DuoKe document management system is for the enterprise to provide a safe, easy to use B / S architecture integrated system, through the system to complete the integration of enterprise document storage, sub-group folder display, full-text search of document content, document preview, download and...

SeedDMS Cross-Site Request Forgery Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

SeedDMS Cross-Site Request Forgery Vulnerability (CNVD-2021-19687)

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditDocument.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

Excellent Infotek Corporation EIC e-document system SQL注入漏洞

Excellent Infotek Corporation EIC e-document system is an application system of Excellent Infotek Corporation. EIC e-document system is an application system of Excellent Infotek Corporation, which provides precise, simple and standardized XML document forms to simplify the process of writing and...

SeedDMS Open Redirect Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. An open redirection vulnerability exists in SeedDMS 6.0.13, which can be exploited by an attacker via the dropfolderfileform1 parameter of out/out.AddDocument.php to conduct an open redirection attack...

Dolibarr ERP/CRM DMS/ECM Module Cross-Site Scripting Vulnerability (CNVD-2020-41507)

Dolibarr ERP/CRM is a Web-based Enterprise Resource Planning ERP and Customer Relationship Management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, etc. DMS/ECM is one of the document management systems and enterprise...

OpenDocMan 1.3.4 - (search.php where) SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================================================== Exploit Title: OpenDocMan 1.3.4 - ’where’ SQL Injection Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

OpenDocMan 1.3.4 - search.php where SQL Injection

OpenDocMan 1.3.4 - search.php where SQL Injection =========================================================================================== Exploit Title: OpenDocMan 1.3.4 - ’where’ SQL Injection CVE: N/A Date: 05/03/2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage:...

LogicalDOC Enterprise 7.7.4 - Root Remote Code Execution

LogicalDOC Enterprise 7.7.4 Post-Auth Command Execution Via Binary Path Manipulation Vendor: LogicalDOC Srl Product web page: https://www.logicaldoc.com Affected version: 7.7.4 7.7.3 7.7.2 7.7.1 7.6.4 7.6.2 7.5.1 7.4.2 7.1.1 Summary: LogicalDOC is a free document management system that is designe...

LogicalDOC Enterprise 7.7.4 - User Enumeration

LogicalDOC Enterprise 7.7.4 - User Enumeration LogicalDOC Enterprise 7.7.4 Username Enumeration Weakness Vendor: LogicalDOC Srl Product web page: https://www.logicaldoc.com Affected version: 7.7.4 7.7.3 7.7.2 7.7.1 7.6.4 7.6.2 7.5.1 7.4.2 7.1.1 Summary: LogicalDOC is a free document management...

MEDHOST Document Management Information Disclosure Vulnerability

MEDHOST Document Management System is a document management system from the American company MEDHOST. The system manages documents such as user access and audit logs by defining different roles and permissions. A security vulnerability exists in MEDHOST Document Management System, which originate...

CVE-2017-11694

MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with Apache Solr may be able to obtain or modify sensitive patient and financial information. T...

CVE-2017-11693

MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial...

Hardcoded credentials

MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with Apache Solr may be able to obtain or modify sensitive patient and financial information. T...

CVE-2017-11694

MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with Apache Solr may be able to obtain or modify sensitive patient and financial information. T...