Lucene search
+L

300 matches found

OSV
OSV
•added 2023/07/20 8:15 p.m.•12 views

CVE-2021-39425

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

6.1CVSS5.9AI score0.00501EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/20 8:15 p.m.•29 views

CVE-2021-39425

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

6.1CVSS6.3AI score0.00501EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/07/20 8:15 p.m.•12 views

CVE-2021-39425

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

6.1CVSS6.5AI score0.00501EPSS
SaveExploits0References4
Prion
Prion
•added 2023/07/20 8:15 p.m.•29 views

Open redirect

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

5.8CVSS6.2AI score0.00501EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/20 12:00 a.m.•18 views

CVE-2021-39425

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

7.2AI score0.00501EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/20 12:00 a.m.•26 views

CVE-2021-39425

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links...

6.5AI score0.00501EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/07/20 12:00 a.m.•14 views

SeedDMS 输入验证错误漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used to store and share documents. A security vulnerability exists in SeedDMS version v6.0.15, which stems from an open redirection vulnerability that can b...

6.1CVSS6.8AI score0.00501EPSS
SaveExploits0References3
CVE
CVE
•added 2023/07/20 12:00 a.m.•68 views

CVE-2021-39425

SeedDMS v6.0.15 contains an open redirect vulnerability: an attacker can lure a user into clicking a crafted link to redirect to an arbitrary URL. This affects SeedDMS’s web interface and originates from an open redirect in the application flow. The reported impact is user redirection; no exploit...

6.1CVSS6.2AI score0.00501EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2023/06/07 1:15 a.m.•22 views

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

8.8CVSS8.8AI score0.00797EPSS
SaveExploits1References2
OSV
OSV
•added 2023/06/07 1:15 a.m.•12 views

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

8.8CVSS5.8AI score0.00797EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/06/07 1:15 a.m.•7 views

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

8.8CVSS7AI score0.00797EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/07 1:15 a.m.•22 views

Arbitrary file deletion

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

6.5CVSS8.7AI score0.00797EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/06/07 12:00 a.m.•20 views

PT-2023-12199 · Seeddms · Seeddms

Name of the Vulnerable Software and Affected Versions: SeedDMS version 6.0.15 Description: An issue in SeedDMS allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file. Recommendations: For SeedDMS version 6.0.15, consider restricting access to the...

8.8CVSS8.7AI score0.00797EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/06/07 12:00 a.m.•12 views

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

7.1AI score0.00797EPSS
SaveExploits1References2
CVE
CVE
•added 2023/06/07 12:00 a.m.•50 views

CVE-2021-33223

SeedDMS 6.0.15 contains a privilege-escalation issue that can be triggered through the userid and role parameters in the out.UsrMgr.php file. The vulnerability allows an attacker to elevate privileges within SeedDMS per multiple sources (e.g., Red Hat advisory and other mappings), with CVSS v3.1 ...

8.8CVSS8.7AI score0.00797EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/06/07 12:00 a.m.•25 views

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

8.9AI score0.00797EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/06/07 12:00 a.m.•13 views

SeedDMS 安全漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS version 6.0.15, which originated from a vulnerability that allows an...

8.8CVSS8AI score0.00797EPSS
SaveExploits1References3
NVD
NVD
•added 2022/12/08 8:15 p.m.•28 views

CVE-2022-44938

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

9.8CVSS0.00972EPSS
SaveExploits1References1
OSV
OSV
•added 2022/12/08 8:15 p.m.•10 views

CVE-2022-44938

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

9.8CVSS5.8AI score0.00972EPSS
SaveExploits1References1
Prion
Prion
•added 2022/12/08 8:15 p.m.•15 views

Design/Logic Flaw

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

7.5CVSS9.3AI score0.00972EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder