PT-2014-4599

Name of the Vulnerable Software and Affected Versions SeedDMS versions prior to 4.3.4 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This is achieved by specifying the partitionIndex parameter and accessing the file via th...

CVE-2014-2278: Improper Input Validation

Unrestricted file upload vulnerability in op/op.AddFile2.php in SeedDMS formerly LetoDMS and MyDMS before 4.3.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the partitionIndex parameter and leveraging CVE-2014-2279.2 to access it...