Agorum Core Pro 7.8.1.4-251 Cross Site Request Forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2017-008 Product: agorum core Pro Manufacturer: agorum Software GmbH Affected Versions: 7.8.1.4-251 Tested Versions: 7.8.1.4-251 Vulnerability Type: Cross-Site Request Forgery CWE-352 Risk Level: Medium Solution Status: Open...

agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting

agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting !-- Source: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2017-005.txt Advisory ID: SYSS-2017-005 Product: agorum core Pro Manufacturer: agorum Software GmbH Affected Versions: 7.8.1.4-251 Tested Versions:...

agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting

!-- Source: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2017-005.txt Advisory ID: SYSS-2017-005 Product: agorum core Pro Manufacturer: agorum Software GmbH Affected Versions: 7.8.1.4-251 Tested Versions: 7.8.1.4-251 Vulnerability Type: Persistent Cross-Site Scripting...

agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery

agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery !-- Source: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2017-008.txt Advisory ID: SYSS-2017-008 Product: agorum core Pro Manufacturer: agorum Software GmbH Affected Versions: 7.8.1.4-251 Tested Versions: 7.8.1.4-25...

Opendocman Cross-Site Request Forgery Vulnerability (CNVD-2016-03274)

OpenDocMan is a versatile Web-based document management system DMS written in PHP and designed to follow the ISO 17025/IEC standard. A cross-site request forgery vulnerability exists in OpenDocMan. Since the program allows users to perform certain actions via unauthenticated HTTP requests, an...

Opendocman HTML Injection Vulnerability

OpenDocMan is a versatile Web-based document management system DMS written in PHP and designed to follow the ISO 17025/IEC standard. OpenDocMan suffers from an HTML injection vulnerability due to the setting of filters to filter user input. An attacker may perform elevation of privilege or...

KnowledgeTree OSS 3.0.3b Cross Site Scripting

KnowledgeTree OSS 3.0.3b Reflected XSS Cross-site Scripting Web Application 0-Day Security Bug Exploit Title: KnowledgeTree login.php &errorMessage parameter Reflected XSS Web Security Vulnerability Product: Knowledge Tree Document Management System Vendor: Knowledge Inc Vulnerable Versions: OSS...

Openkm Document Management System 6.4.17 Cross Site Scripting

Openkm Document Management System Suffers From Cross Site Scripting Attack http://khalil-shreateh.com/khalil.shtml/images/articles/websites/vulnerabili ties/openkm.jpg Version Khalil Shreateh Auther Website: http://khalil-shreateh.com Status : Reported . Report Link :...

OpenDocMan 1.2.6.5 - Persistent XSS Vulnerability

No description provided by source. Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS Date: 05/04/2013 Exploit Author: drone @dronesec More Exploit Information: Vendor Homepage: http://www.opendocman.com/ Software Link:...

Kordil EDMS 2.2.60rc3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability Date: 12/05/2012 Exploit Author: Woody Hughes [email protected] Vendor Homepage: http://sourceforge.net/projects/kordiledms/ Software Link:...

XODA Document Management System 0.4.5 - XSS & Arbitrary File Upload

No description provided by source. Exploit Title: XODA Document Management System Stored XSS & Arbitrary File Upload Vulnerability. Date: 21/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://xoda.org/ Software Link: http://sourceforge.net/projects/xoda/files/xoda/xoda-0.4.5/...

Simple Document Management System 2.0 list.php folder_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15596/info Simple Document Management System SDMS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Mayan-EDms Web-Based Document Management OS System - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: Multiple Stored XSS Software: Maya EDMS Software Link: http://www.mayan-edms.com/downloads/Mayan%20EDMS%20v0.13.ova Version: 0.13 - latest Author: Dolev Farhi, email: dolevatopenflaredotorg @f1nhack Date: 21.5.2014 Tested on: Kali Linux Vendor homepage: www.mayan-edms.com 1. About...

OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting

OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS Date: 05/04/2013 Exploit Author: drone @dronesec More Exploit Information: Vendor Homepage: http://www.opendocman.com/ Software Link:...

OpenDocMan 1.2.6.5 - Persistent Cross-Site Scripting

Exploit Title: OpenDocMan 1.2.6.5 Stored/Reflective XSS Date: 05/04/2013 Exploit Author: drone @dronesec More Exploit Information: Vendor Homepage: http://www.opendocman.com/ Software Link: http://sourceforge.net/projects/opendocman/files/opendocman/1.2.6.5/opendocman-1.2.6.5.zip/download Version...

Kordil EDms 2.2.60rc3 - SQL Injection

Kordil EDms 2.2.60rc3 - SQL Injection Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability Date: 12/05/2012 Exploit Author: Woody Hughes Vendor Homepage: http://sourceforge.net/projects/kordiledms/ Software Link: http://sourceforge.net/projects/kordiledms/files/latest/download Versio...

Kordil EDMS 2.2.60rc3 SQL Injection Vulnerability

Kordil EDMS version 2.2.60rc3 suffers from a remote SQL injection vulnerability. Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability Date: 12/05/2012 Exploit Author: Woody Hughes Vendor Homepage: http://sourceforge.net/projects/kordiledms/ Software Link:...

Kordil EDMS 2.2.60rc3 SQL Injection

Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability Date: 12/05/2012 Exploit Author: Woody Hughes Vendor Homepage: http://sourceforge.net/projects/kordiledms/ Software Link: http://sourceforge.net/projects/kordiledms/files/latest/download Version: 2.2.60rc3 Tested on: Ubuntu Linux...

LetoDMS 3.3.6 XSS/CSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: LetoDMS 3.3.6 Multiple Reflected/Stored XSS & Password Change CSRF Vulnerability Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.letodms.com/ Software Link:...

letodms 3.3.6 - Multiple Vulnerabilities

letodms 3.3.6 - Multiple Vulnerabilities Exploit Title: LetoDMS 3.3.6 Multiple Reflected/Stored XSS & Password Change CSRF Vulnerability Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.letodms.com/ Software Link:...