CVE-2024-6014 itsourcecode Document Management System edithis.php sql injection

A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the file edithis.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2024-6014

The CVE-2024-6014 entry concerns itsourcecode Document Management System 1.0. Affects an unknown function in edithis.php where manipulating the id parameter triggers SQL injection, enabling remote exploitation. Multiple connected sources confirm SQLi in edithis.php with remote access and public e...

PT-2024-37317 · Unknown · Itsourcecode Document Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Document Management System version 1.0 Description: A critical issue has been found in the itsourcecode Document Management System. The problem is related to an unknown function in the file edithis.php, where the manipulation of...

itsourcecode Document Management System SQL Injection Vulnerability

Document Management System is an open source document management system from Itsourcecode. A SQL injection vulnerability exists in itsourcecode Document Management System version 1.0, which originates from edithis.php containing an unknown function that causes SQL injection via the parameter id...

Redmine 安全漏洞

Redmine is a suite of open source web-based project management and defect tracking tools. The product provides features such as project management, issue tracking and role-based access control. A security vulnerability exists in Redmine DMSF versions prior to 3.1.4, which stems from the presence ...

Security Bulletin: Incorrect authorization vulnerability affect IBM Business Automation Workflow - CVE-2023-47716

Summary IBM Business Automation Workflow embedded doucment managaement system is vulnerable to incorrect authorization an attack. Vulnerability Details CVEID:CVE-2023-47716 DESCRIPTION: IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the...

CVE-2023-52098

Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...

PT-2024-14395 · Unknown · Dms Module

Name of the Vulnerable Software and Affected Versions: DMS module affected versions not specified Description: A Denial of Service DoS issue in the DMS module can be exploited to affect availability. The vulnerability allows for successful exploitation to impact the system's availability...

CVE-2023-4034

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0...

CVE-2023-4034

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection.This issue affects Smartrise Document Management System: before Hvl-2.0...

CVE-2023-4034

CVE-2023-4034 affects Digita Information Technology Smartrise Document Management System prior to Hvl-2.0. The flaw is an SQL Injection due to improper neutralization of special elements in SQL commands, enabling likely high-impact abuse (CVSSv3.1: 9.8, CRITICAL; Confidentiality/Integrity/Availab...

CVE-2023-4034 SQLi in Smartrise Document Management System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0...

PMB 资源管理错误漏洞

PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB version v7.4.6, which stems from an arbitrary file upload vulnerability contained in the cameraupload.php component. An attacker could exploit the vulnerability to execute...

Unpatched Security Flaws Disclosed in Multiple Document Management Systems

Multiple unpatched security flaws have been disclosed in open source and freemium Document Management System DMS offerings from four vendors LogicalDOC, Mayan, ONLYOFFICE, and OpenKM. Cybersecurity firm Rapid7 said the eight vulnerabilities offer a mechanism through which "an attacker can convinc...

OpenKM 跨站脚本漏洞

OpenKM is a document management system from OpenKM Spain. The system provides features such as version control, document history and file sharing. A security vulnerability exists in OpenKM DMS. An attacker exploited the vulnerability to perform cross-site scripting attacks...

collective.dms.basecontent 跨站脚本漏洞

collective.dms.basecontent is Collective open source a document management system for the basic content class . collective.dms.basecontent version 1.7 suffers from a cross-site scripting vulnerability. Attackers use this vulnerability to execute cross-site scripting attacks...

SeedDMS 安全漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS versions v6.0.20 and v5.1.7, which stems from weak reset token generation...

SeedDMS Cross-Site Scripting Vulnerability (CNVD-2022-66668)

SeedDMS formerly known as LetoDMS and MyDMS is a PHP and MySql based document management system. A cross-site scripting vulnerability exists in SEEDMS versions 6.0.18 and 5.1.25, which are primarily used to store and share documents. The vulnerability can be exploited to inject a payload into the...

CVE-2022-27192

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...