Digita Information Technology Smartrise Document Management System SQL Injection Vulnerability

Digita Information Technology Smartrise Document Management System is a document management system from Digita Information Technology, Turkey. A SQL injection vulnerability exists in Digita Information Technology Smartrise Document Management System Hvl-2.0 prior versions, which stems from...

PT-2023-27398 · Digita Information Technology · Smartrise Document Management System

Name of the Vulnerable Software and Affected Versions: Digita Information Technology Smartrise Document Management System versions prior to Hvl-2.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This...

SeedDMS Information Disclosure Vulnerability

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used to store and share documents. A security vulnerability exists in SeedDMS version v6.0.15, which stems from an open redirection vulnerability that can b...

Oracle Primavera Unifier (Jul 2023 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2023 CPU advisory. - Security-in-Depth issue in the Primavera Unifier product of Oracle Construction and Engineering component: User Interface JSZip. This vulnerabilit...

Oracle Primavera Unifier (Apr 2023 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Document Management FreeType. Supported versions...

PMB 跨站脚本漏洞

PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB v7.4.6, which stems from the discovery of a query parameter containing a Reflected Cross-Site Scripting XSS vulnerability via the query parameter in...

PMB 资源管理错误漏洞

PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB version v7.4.6, which stems from an arbitrary file upload vulnerability contained in the cameraupload.php component. An attacker could exploit the vulnerability to execute...

PMB 安全漏洞

PMB is a 100% free document management reference tool from the PMB Services team. A security vulnerability exists in PMB version v7.4.6, which stems from a discovery via component /sauvegarde/restaureact.php that contains a Remote Code Execution RCE vulnerability...

Unpatched Security Flaws Disclosed in Multiple Document Management Systems

Multiple unpatched security flaws have been disclosed in open source and freemium Document Management System DMS offerings from four vendors LogicalDOC, Mayan, ONLYOFFICE, and OpenKM. Cybersecurity firm Rapid7 said the eight vulnerabilities offer a mechanism through which "an attacker can convinc...

Unpatched Security Flaws Disclosed in Multiple Document Management Systems

Multiple unpatched security flaws have been disclosed in open source and freemium Document Management System DMS offerings from four vendors LogicalDOC, Mayan, ONLYOFFICE, and OpenKM. Cybersecurity firm Rapid7 said the eight vulnerabilities offer a mechanism through which "an attacker can convinc...

LogicalDOC 跨站脚本漏洞

LogicalDOC is the U.S. LogicalDOC company a set of document management system developed using Java technology . The system has features such as Lucene full-text search indexing and automatic import. A security vulnerability exists in LogicalDOC Enterprise and Community Edition CE. An attacker cou...

OpenKM 跨站脚本漏洞

OpenKM is a document management system from OpenKM Spain. The system provides features such as version control, document history and file sharing. A security vulnerability exists in OpenKM DMS. An attacker exploited the vulnerability to perform cross-site scripting attacks...

collective.dms.basecontent 跨站脚本漏洞

collective.dms.basecontent is Collective open source a document management system for the basic content class . collective.dms.basecontent version 1.7 suffers from a cross-site scripting vulnerability. Attackers use this vulnerability to execute cross-site scripting attacks...

SeedDMS 安全漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS versions v6.0.20 and v5.1.7, which stems from weak reset token generation...

Oracle Primavera Unifier (Oct 2022 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Document Management Apache Solr. Supported...

Security Bulletin: Spoofing vulnerability in IBM Business Automation Workflow (CVE-2019-4045)

Summary A Spoofing vulnerability has been found in IBM Business Automation Workflow. Vulnerability Details CVEID: CVE-2019-4045 DESCRIPTION: IBM Business Automation Workflow and IBM Business Process Manager provide embedded document management features. Because of a missing restriction in an API,...

Oracle Primavera Unifier (Jul 2022 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2022 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Document Management jackson-databind. Supported...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2022-69532)

Cybozu Garoon is a portal-based OA office system from Cybozu Japan. The system provides portal, E-mail, bookmark, scheduler, bulletin board, document management, etc. An information disclosure vulnerability exists in Cybozu Garoon, which stems from exporting too much data in multiple applications...

Tuleap Cross-Site Scripting Vulnerability

Tuleap is an application lifecycle management system that facilitates agile software development, design projects, V-models, requirements management and IT service management.A cross-site scripting vulnerability exists in versions prior to Tuleap 13.9.99.111, which stems from a failure to properl...

CVE-2022-31063 Cross site scripting via the title of a document in Tuleap

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.111 the title of a document is not properly escaped in the search result of MyDocmanSearch widget and in the administration page of the locked documents. A malicious...