172 matches found
CVE-2024-35475
A Cross-Site Request Forgery CSRF vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative privileges to execute arbitrary SQL commands...
CVE-2024-35475
A Cross-Site Request Forgery CSRF vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative privileges to execute arbitrary SQL commands...
OpenKM 安全漏洞
OpenKM is a document management system from the Spanish company OpenKM. The system provides features such as version control, document history and file sharing. A security vulnerability exists in OpenKM 6.3.12 and earlier versions, which stems from a cross-site request forgery CSRF vulnerability ...
PT-2024-26513
Name of the Vulnerable Software and Affected Versions OpenKM Community Edition versions 6.3.12 and earlier Description A Cross-Site Request Forgery CSRF issue was found in the "admin/DatabaseQuery" endpoint, allowing an attacker to manipulate a victim with administrative privileges into executing...
CVE-2023-50072
A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...
CVE-2023-50072
A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...
Cross site scripting
A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...
OpenKM Cross-Site Scripting Vulnerability
OpenKM is a document management system from OpenKM Spain. The system provides features such as version control, file history and file sharing. A cross-site scripting vulnerability exists in OpenKM version 7.1.40, which originates from a cross-site scripting attack that allows authenticated users ...
CVE-2023-50072
A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...
CVE-2023-50072
A Stored Cross-Site Scripting XSS vulnerability exists in OpenKM version 7.1.40 dbb6e88 With Professional Extension that allows an authenticated user to upload a note on a file which acts as a stored XSS payload. Any user who opens the note of a document file will trigger the XSS...
CVE-2023-50072
CVE-2023-50072 refers to a Stored XSS in OpenKM 7.1.40 (dbb6e88) with Professional Extension. An authenticated user can upload a note on a file; when other users view the note, the payload executes in the browser. Public exploit details are present in connected sources (e.g., a PoC repository) bu...
The vulnerability of the OpenKM document management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the OpenKM document management system is related to the lack of measures taken to protect the website structure when processing the text parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by downloading specially created...
Exploit for Cross-site Scripting in Openkm
CVE-2023-50072 A stored cross-site scripting XSS vulnerabil...
PT-2023-8008 · Openkm · Openkm
Name of the Vulnerable Software and Affected Versions: OpenKM version 7.1.40 Description: A Stored Cross-Site Scripting XSS issue exists that allows an authenticated user to upload a note on a file, which acts as a stored XSS payload. Any user who opens the note of a document file will trigger th...
CVE-2021-33950
An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function...
CVE-2021-33950
An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function...
Design/Logic Flaw
An issue discovered in OpenKM v6.3.10 allows attackers to obtain sensitive information via the XMLTextExtractor function...
CVE-2021-33950
CVE-2021-33950 affects OpenKM v6.3.10: the XMLTextExtractor function can disclose sensitive information. Root cause described as an information disclosure in XMLTextExtractor. The documented impact is high confidentiality (CVSS v3.1 score 7.5). The provided connected documents do not include expl...
OpenKM 代码问题漏洞
OpenKM is a document management system from OpenKM Spain. The system provides features such as version control, document history and file sharing. A security vulnerability exists in OpenKM version v6.3.10, which originated from a vulnerability that allows an attacker to obtain sensitive informati...