EUVD-2012-4327

Malware in sbrugna...

EUVD-2010-2027

Malware in sbrugna...

EUVD-2012-4495

Malware in sbrugna...

EUVD-2012-4496

Malware in sbrugna...

EUVD-2012-4497

Malware in sbrugna...

EUVD-2012-4498

Malware in sbrugna...

EUVD-2010-2026

Malware in sbrugna...

CVE-2012-4385

letodms 3.3.6 has CSRF via change password...

CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

CVE-2012-4385

letodms 3.3.6 has CSRF via change password...

CVE-2012-4385

letodms 3.3.6 has CSRF via change password...

Cross site request forgery (csrf)

letodms 3.3.6 has CSRF via change password...

CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

Cross site scripting

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

CVE-2012-4385

letodms 3.3.6 has CSRF via change password...

CVE-2012-4385

CVE-2012-4385 affects letodms 3.3.6. The connected documents identify a CSRF vulnerability in the change password flow, enabling an attacker to induce password changes without user intent. Root cause is CSRF in the authentication workflow, with impact limited to confidentiality/ integrity of the ...

CVE-2012-4384

CVE-2012-4384 affects letodms and involves multiple XSS issues: reflected XSS on the login page, and stored XSS in the Document Owner/User name and in the Calendar. The provided documents do not specify affected versions, root-cause details beyond generic XSS, exploit status, or available remedia...

CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

CVE-2018-12941

This vulnerability allows remote attackers to execute arbitrary code in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 by adding a system command at the end of the "cacheDir" path and following usage of the "Clear Cache" functionality. This allows an authenticated attacker, with permission to th...