PT-2024-27707 · Tessi · Tessi Docubase Document Management

Name of the Vulnerable Software and Affected Versions: Tessi Docubase Document Management product versions 5.x Description: The issue allows a remote attacker to execute arbitrary code via the idactivity parameter, which is related to a Cross Site Scripting vulnerability. Recommendations: For Tes...

CVE-2024-37675

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the parameter "sectionContent" related to the functionality of adding notes to an uploaded file...

CVE-2024-37675

CVE-2024-37675 is a Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x. The issue allows a remote attacker to execute arbitrary code via the sectionContent parameter used when adding notes to an uploaded file. The vulnerability is documented with CVSS 3.1: Networ...

CVE-2024-37672

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the idactivity parameter...

CVE-2024-37671

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...

CVE-2024-37672

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the idactivity parameter...

Tessi Docubase Document Management Security Vulnerability

Tessi Docubase Document Management is a document management and process automation software from Tessi. A security vulnerability exists in Tessi Docubase Document Management, version 5.x. A remote attacker could use this vulnerability to execute arbitrary code via the idactivity parameter. A remo...

Tessi Docubase Document Management Security Vulnerability

Tessi Docubase Document Management is a document management and process automation software from Tessi. A security vulnerability exists in Tessi Docubase Document Management version 5.x. A remote attacker could exploit the vulnerability to execute arbitrary code via the page parameter...

CVE-2024-37675

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the parameter "sectionContent" related to the functionality of adding notes to an uploaded file...

CVE-2024-37671

CVE-2024-37671 affects Tessi Docubase Document Management 5.x. A Cross Site Scripting (XSS) flaw exists in the page parameter that could allow a remote attacker to execute arbitrary code. This is documented in multiple sources (NVD/Red Hat/CNNVD/CVE listings), but the connected EU/NVD/RH/CNNVD en...

Tessi Docubase Document Management Security Vulnerability

Tessi Docubase Document Management is a document management and process automation software from Tessi. A security vulnerability exists in Tessi Docubase Document Management version 5.x. A remote attacker could exploit the vulnerability to execute arbitrary code via the filename parameter...

CVE-2024-37671

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...

PT-2024-27708 · Tessi · Tessi Docubase Document Management

Name of the Vulnerable Software and Affected Versions: Tessi Docubase Document Management product versions 5.x Description: The issue allows a remote attacker to execute arbitrary code via the filename parameter. This is a Cross Site Scripting vulnerability. Recommendations: For Tessi Docubase...

Tessi Docubase Document Management Security Vulnerability

Tessi Docubase Document Management is a document management and process automation software from Tessi. A security vulnerability exists in Tessi Docubase Document Management version 5.x. A remote attacker could exploit the vulnerability to execute arbitrary code via the sectionContent parameter...

CVE-2024-6014

A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the file edithis.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2024-6014 itsourcecode Document Management System edithis.php sql injection

A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the file edithis.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2024-6014 itsourcecode Document Management System edithis.php sql injection

A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the file edithis.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2024-6014

The CVE-2024-6014 entry concerns itsourcecode Document Management System 1.0. Affects an unknown function in edithis.php where manipulating the id parameter triggers SQL injection, enabling remote exploitation. Multiple connected sources confirm SQLi in edithis.php with remote access and public e...

PT-2024-37317 · Unknown · Itsourcecode Document Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Document Management System version 1.0 Description: A critical issue has been found in the itsourcecode Document Management System. The problem is related to an unknown function in the file edithis.php, where the manipulation of...

itsourcecode Document Management System SQL Injection Vulnerability

Document Management System is an open source document management system from Itsourcecode. A SQL injection vulnerability exists in itsourcecode Document Management System version 1.0, which originates from edithis.php containing an unknown function that causes SQL injection via the parameter id...