Directory traversal

A directory traversal flaw in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows an authenticated attacker to write to or potentially delete arbitrary files via a .. dot dot in the "op/op.UploadChunks.php" "qquuid" parameter. NOTE: this can be leveraged to execute arbitrary code by using...

CVE-2018-12939

SeedDMS (formerly LetoDMS/MyDMS) is vulnerable to a directory traversal flaw in op/op.UploadChunks.php that allows an authenticated attacker to write/delete arbitrary files. Affected versions are SeedDMS prior to 5.1.8; 5.1.8 fixes the issue. The vulnerability stems from unsafely handling the qqu...

CVE-2018-12939

A directory traversal flaw in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows an authenticated attacker to write to or potentially delete arbitrary files via a .. dot dot in the "op/op.UploadChunks.php" "qquuid" parameter. NOTE: this can be leveraged to execute arbitrary code by using...

PT-2018-11494

Name of the Vulnerable Software and Affected Versions SeedDMS versions prior to 5.1.8 Description A directory traversal flaw allows an authenticated attacker to write to or potentially delete arbitrary files by using a .. dot dot in the "qquuid" parameter of the "op/op.UploadChunks.php" endpoint...

CVE-2018-12940: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to...

CVE-2018-12939: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal flaw in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows an authenticated attacker to write to or potentially delete arbitrary files via a .. dot dot in the "op/op.UploadChunks.php" "qquuid" parameter. NOTE: this can be leveraged to execute arbitrary code by using...