40 matches found
Debian Security Advisory DSA 2146-1 (mydms)
The remote host is missing an update to mydms announced via advisory DSA 2146-1. OpenVAS Vulnerability Test $Id: deb21461.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2146-1 mydms Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian DSA-2146-1 : mydms - directory traversal
D. Fabian and L. Weichselbaum discovered a directory traversal vulnerability in MyDMS, an open source document management system based on PHP and MySQL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
[SECURITY] [DSA 2146-1] Security update for mydms
------------------------------------------------------------------------- Debian Security Advisory DSA-2146-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 16, 2011 http://www.debian.org/security/faq -...
DSA-2146-1 mydms - directory traversal
Bulletin has no description...
CVE-2010-2006
Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2010-2006
CVE-2010-2006 affects LetoDMS (formerly MyDMS) 1.7.2 and earlier, via a directory traversal in op/op.Login.php that allows remote authenticated users to include and execute arbitrary local files through a .. in the lang parameter. The vulnerability is documented in Debian DSA-2146-1 for the mydms...
CVE-2010-2007
CVE-2010-2007 describes multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier. The issues allow remote attackers to hijack administrator authentication for requests to specific endpoints: op/op.EditUserData.php, op/op.UsrMgr.php, out/out.RemoveVe...
LetoDMS Local File Inclusion / Cross Site Request Forgery
SEC Consult Security Advisory ======================================================================== title: Local file inclusion/execution and multiple Cross-Site-Request-Forgery vulnerabilities in LetoDMS formerly MyDMS products: LetoDMS formerly MyDMS vulnerable version: LetoDMS formerly MyDM...
CVE-2004-1733
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. dot dot sequences in the URL...
CVE-2004-1733
CVE-2004-1733 is a directory traversal vulnerability in MyDMS 1.4.2 and other versions that allows remote registered users to read arbitrary files via ../ sequences in the URL. From the linked NASL, it is noted as affecting
CVE-2004-1732
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter...
CVE-2004-1732
CVE-2004-1732 affects MyDMS before 1.4.2, with an SQL injection in the code path out.ViewFolder.php that accepts the folderid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands via that input, enabling potential data access or manipulation. The connected docume...
Bugs fixed in Version 1.4.3
In-Reply-To: [email protected] B. Unspecified File Download Vulnerability B1. An error in the MyDMS software allows to a registered users and only to registered users to download any file, such as /etc/passwd, by inserting in a parameter a text such as...
MyDMS.txt
--------------------------------------------------------------------------- Multiple vulnerabilities in MyDMS --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...
Multiple vulnerabilities in MyDMS
--------------------------------------------------------------------------- Multiple vulnerabilities in MyDMS --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...
MyDMS < 1.4.3 Multiple Vulnerabilities
The remote host is running MyDMS, an open source document management system based on MySQL and PHP. The remote version of this software is vulnerable to a SQL injection bug that may allow any guest user to execute arbitrary SQL commands against the remote database. There is also a directory...
MyDms 1.4 - SQL Injection / Directory Traversal
source: https://www.securityfocus.com/bid/10996/info MyDMS is reportedly susceptible to both a directory traversal vulnerability and an SQL injection vulnerability. The SQL injection vulnerability is present because a script improperly sanitizes user-supplied data located in a URI argument before...
MyDms 1.4 - SQL Injection Directory Traversal
MyDms 1.4 - SQL Injection Directory Traversal source: https://www.securityfocus.com/bid/10996/info MyDMS is reportedly susceptible to both a directory traversal vulnerability and an SQL injection vulnerability. The SQL injection vulnerability is present because a script improperly sanitizes...
