SeedDMS Cross-Site Request Forgery Vulnerability (CNVD-2021-19687)

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditDocument.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

SeedDMS Cross-Site Request Forgery Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

Cross site request forgery (csrf)

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

Cross site request forgery (csrf)

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by a Cross-Site Request Forgery (CSRF) in out.EditFolder.php, as documented across multiple sources (SeedDMS and CNVD). The vulnerability allows CSRF to trigger actions that can lead to editing a victim’s document. Root cause details are not explicitly provided beyond th...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php. The underlying issue allows an attacker to edit a victim’s document via CSRF, requiring user interaction, per CVE-2021-26215 details. No additional exploitation details are provided in the connected documents.

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

SeedDMS 跨站请求伪造漏洞

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

SeedDMS 跨站请求伪造漏洞

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditDocument.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

Cross site scripting

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

CVE-2020-28727

SeedDMS 6.0.13 is affected by a cross-site scripting (XSS) vulnerability exploitable via the folderid parameter to views/bootstrap/class.DropFolderChooser.php. The issue arises from improper handling of user-controlled input in that parameter, enabling injected script when the affected page is lo...

CVE-2020-28727

Cross-site scripting XSS exists in SeedDMS 6.0.13 via the folderid parameter to views/bootstrap/class.DropFolderChooser.php...

SeedDMS Cross-Site Scripting Vulnerability

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A cross-site scripting vulnerability exists in SeedDMS version 6.0.13, which originates from the...