OpenDocMain 代码问题漏洞

OpenDocMain is a free PHP document management system DMS. A security vulnerability exists in OpenDocMain version 1.4.4, which stems from the lack of file upload restrictions in add.php. An attacker can use MIME-bypass to exploit this vulnerability to upload dangerous types of files to the portal...

Keep Solutions Archeevo 安全漏洞

Keep Solutions Archeevo is a phase of document management software from Keep Solutions, Portugal. Keep archives organizations in all functional areas, covering activities from file description to productivity management. A security vulnerability exists in Keep Solutions Archeevo that could be...

How to Use OneDrive for Office 365 on Desktop

By Owais Sultan OneDrive is used to help organizations store files and documents. Learn how to use OneDrive for Office 365… This is a post from HackRead.com Read the original post: How to Use OneDrive for Office 365 on Desktop...

K-Box Cross-Site Scripting Vulnerability

K-Box is a web-based application used to manage document, image, video and geographic data. A cross-site scripting vulnerability exists in K-Box, which stems from the fact that the editors of the product's user document summaries and markdown file previews do not securely handle special character...

Saraban Access Control Error Vulnerability

Saraban is a document management system from Softvibe, Thailand. It is used for transferring files and notifications to reduce unnecessary duplication.SARABAN suffers from an access control error vulnerability that stems from the application not properly enforcing access control over signed files...

Saraban SQL Injection Vulnerability

Softvibe Saraban is a document management system from Softvibe Thailand. It is used for transferring files and notifications to reduce unnecessary duplication. softvibe Saraban has a SQL injection vulnerability in v1.1, which can be exploited by attackers to execute illegal SQL commands to steal...

Softvibe Saraban SQL注入漏洞

Softvibe Saraban is a document management system from Softvibe Thailand. It is used for transferring files and notifications to reduce unnecessary duplication. softvibe Saraban has a SQL injection vulnerability in v1.1, which can be exploited by attackers to execute illegal SQL commands to steal...

Softvibe Saraban 安全漏洞

Saraban is a document management system from Softvibe, Thailand. It is used for transferring files and notifications to reduce unnecessary duplication.SARABAN suffers from an access control error vulnerability that stems from the application not properly enforcing access control over signed files...

Teedy cross-site scripting vulnerability (CNVD-2022-08344)

Teedy is a French open source, lightweight document management system for individuals and businesses. Teedy suffers from a cross-site scripting vulnerability that stems from the fact that in Teedy, versions v1.5 through v1.9 are susceptible to attacks that store cross-site scripting XSS in the na...

Sophos Secure Workspace For Android Competition Condition Issue Vulnerability

Sophos Secure Workspace For Android is an application from Sophos UK for Android. Used to manage documents stored in the cloud and view documents published via Sophos Mobile servers, Sophos Secure Workspace For Android is vulnerable to a contention issue that could be exploited by a local attacke...

Alfresco code issue vulnerability

Alfresco is an open source enterprise content management system. The platform pages are developed using Freemarker, and the main features include document management, collaboration, records management, knowledge base management, Web content management, etc. Alfresco has a security vulnerability...

Alfresco Cross-Site Scripting Vulnerability (CNVD-2021-83570)

Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. Alfresco has a security vulnerabilit...

Cross-site Scripting (XSS) - Stored in zmister2016/mrdoc

✍️ Description online document system developed based on python. It is suitable for individuals and small teams to manage documents, wiki, knowledge and notes. like gitbook this package is vulnerable for XSS 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable of...

Cross-site Scripting (XSS) - Stored in zmister2016/mrdoc

✍️ Description online document system developed based on python. It is suitable for individuals and small teams to manage documents, wiki, knowledge and notes. like gitbook this package is vulnerable for XSS 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable of XSS...

in zmister2016/mrdoc

✍️ Description online document system developed based on python. It is suitable for individuals and small teams to manage documents, wiki, knowledge and notes. like gitbook this package is vulnerable for RCE due to Yaml.load in import function 🕵️‍♂️ Proof of Concept Uploaded ZIp : Payload.yaml :...

Cross-Site Request Forgery (CSRF) in devcode-it/openstamanager

✍️ Description Attacker able to create any Document management if users visit attacker site. 🕵️‍♂️ Proof of Concept 1.Open the PoC.html In Firefox or safari. 2.now you can check Document management with aaa name have been created. // PoC.html history.pushState'', '', '/' document.forms0.submit; 💥...

Cross-Site Request Forgery (CSRF) in devcode-it/openstamanager

✍️ Description Attacker able to delete any Document management if users visit attacker site. 🕵️‍♂️ Proof of Concept 1.Open the PoC.html In Firefox or safari. 2.now you can check Document management with idrecord value equal to 1 have been created. // PoC.html history.pushState'', '', '/'...

IrisNext 跨站脚本漏洞

IRIS IrisNext is a document management solution from IRIS Luxembourg designed to manage, protect and use your company's information. A security vulnerability exists in IrisNext that allows an authenticated or threatened user to inject malicious JavaScript into the application's folder filenames t...

Unauthorized Access Vulnerability in RICOH Aficio MP C305 at Ricoh (China) Investment Co.

Ricoh China Investment Co., Ltd. provides services and solutions such as document output management services and IT solutions such as office image processing equipment e.g., MFPs, printers, etc., production digital printers, and more. An unauthorized access vulnerability exists in the RICOH Afici...

Canopy Cross-Site Scripting Vulnerability

CheckSec Canopy is a team collaboration system for cyber security from CheckSec UK. The system includes features such as document management, report generation and management, and schedule management. A cross-site scripting vulnerability exists in versions of CheckSec Canopy prior to 3.5.2, which...