Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

6 matches found

Prion
Prion•added 2023/07/20 3:15 a.m.•22 views

Design/Logic Flaw

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

7.5CVSS9.6AI score0.00928EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2023/07/20 2:45 a.m.•45 views

CVE-2023-37289 InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

9.8CVSS9.9AI score0.00928EPSS
SaveExploits0References1
CVE
CVE•added 2023/07/20 2:45 a.m.•72 views

CVE-2023-37289

This CVE (CVE-2023-37289) affects InfoDoc Document On-line Submission and Approval System (versions 22547, 22567) and concerns an Unrestricted Upload of File with Dangerous Type in the file uploading function. The root cause is a permissive file upload mechanism that allows an unauthenticated rem...

9.8CVSS9.8AI score0.00928EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2023/07/20 12:00 a.m.•5 views

CVE-2023-37289: Unrestricted Upload of File with Dangerous Type

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability without logging system to upload and run...

9.8CVSS8.3AI score0.00928EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2023/07/20 12:00 a.m.•7 views

CVE-2023-37290: Server-Side Request Forgery (SSRF)

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as iframe. This vulnerability allows...

7.5CVSS7.4AI score0.0074EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2023/07/20 12:00 a.m.•7 views

PT-2023-25888

Name of the Vulnerable Software and Affected Versions InfoDoc Document On-line Submission and Approval System affected versions not specified Description The issue arises from insufficient restrictions on available tags within the HTML to PDF conversion function, allowing unauthenticated attacker...

7.5CVSS0.0074EPSS
SaveExploits0References7
Rows per page
Query Builder