CVE-2005-3877

CVE-2005-3877 affects the Simple Document Management System (SDMS) 2.0-CVS and earlier. The vulnerabilities are SQL injection flaws in two parameters: (1) folder_id in list.php and (2) mid in a view action to messages.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry...

SDMS 2.0 SQL inj. vuln.

Simple Document Management System SQL injection Vuln. Vuln. dicovered by : r0t Date: 27 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html Vendor:http://sdms.cafuego.net/ affected version: 2.0-CVS and prior Product Description: SDMS uses PHP to provide you wi...

Simple Document Management System 2.0 - messages.php?mid SQL Injection

Simple Document Management System 2.0 - messages.php?mid SQL Injection source: https://www.securityfocus.com/bid/15596/info Simple Document Management System SDMS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inp...

Simple Document Management System 2.0 - list.php?folder_id SQL Injection

Simple Document Management System 2.0 - list.php?folderid SQL Injection source: https://www.securityfocus.com/bid/15596/info Simple Document Management System SDMS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

Simple Document Management System 2.0 - 'messages.php?mid' SQL Injection

source: https://www.securityfocus.com/bid/15596/info Simple Document Management System SDMS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

Simple Document Management System 2.0 - 'list.php?folder_id' SQL Injection

source: https://www.securityfocus.com/bid/15596/info Simple Document Management System SDMS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...