CVE-2019-12932: Improper Neutralization of Input During Web Page Generation

A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete search form placed in the header of out/out.Viewfolder.php...

PT-2019-13031

Name of the Vulnerable Software and Affected Versions SeedDMS version 5.1.11 Description A stored XSS issue was found due to poorly escaping the search result in the autocomplete search form. This form is located in the header of out/out.Viewfolder.php. Recommendations For SeedDMS version 5.1.11,...

CVE-2004-1732: Undefined Security Weakness

SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter...