CVE-2021-36542

Cross-Site Request Forgery CSRF vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x5.1.23 and v6.0.x 6.0.16 allows a remote attacker to lock any document without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...

CVE-2021-35343

Cross-Site Request Forgery CSRF vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x5.1.23 and v6.0.x6.0.16 allows a remote attacker to edit document name without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...

CVE-2021-35343

CVE-2021-35343 is a CSRF vulnerability in SeedDMS. Affected versions are SeedDMS v5.1.x before 5.1.23 and v6.0.x before 6.0.16, where the issue resides in the /op/op.Ajax.php endpoint. An authenticated user who visits a malicious page can have their session used to edit a document’s name without ...

SeedDMS 跨站请求伪造漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is primarily used for storing and sharing documents. A cross-site request forgery vulnerability exists in SeedDMS v5.1.x 5.1.23 and v6.0.x 6.0.16. A remote attacker...

SeedDMS 跨站请求伪造漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is primarily used for storing and sharing documents. A cross-site request forgery vulnerability exists in SeedDMS 5.1.x through 5.1.23 and 6.0.x through 6.0.16, which...

SeedDMS 跨站请求伪造漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is primarily used for storing and sharing documents. A security vulnerability exists in SeedDMS versions 5.1.x through 5.1.23 and 6.0.x through 6.0.16, which originat...

Seeddms 5.1.10 Remote Command Execution

Exploit Title: Seeddms 5.1.10 - Remote Command Execution RCE Authenticated Date: 25/06/2021 Exploit Author: Bryan Leong Vendor Homepage: https://www.seeddms.org/index.php?id=2 Software Link: https://sourceforge.net/projects/seeddms/files/seeddms-5.0.11/ Version: Seeddms 5.1.10 Tested on: Windows ...

Seeddms 5.1.10 - Remote Command Execution (Authenticated) Exploit

Exploit Title: Seeddms 5.1.10 - Remote Command Execution RCE Authenticated Exploit Author: Bryan Leong Vendor Homepage: https://www.seeddms.org/index.php?id=2 Software Link: https://sourceforge.net/projects/seeddms/files/seeddms-5.0.11/ Version: Seeddms 5.1.10 Tested on: Windows 7 x64 CVE:...

Seeddms 5.1.10 - Remote Command Execution (RCE) (Authenticated)

Exploit Title: Seeddms 5.1.10 - Remote Command Execution RCE Authenticated Date: 25/06/2021 Exploit Author: Bryan Leong Vendor Homepage: https://www.seeddms.org/index.php?id=2 Software Link: https://sourceforge.net/projects/seeddms/files/seeddms-5.0.11/ Version: Seeddms 5.1.10 Tested on: Windows ...

Exploit for Unrestricted Upload of File with Dangerous Type in Seeddms

CVE-2019-12744 Information Exploit Title: Remote Command...

SeedDMS Cross-Site Request Forgery Vulnerability

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditFolder.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

SeedDMS Cross-Site Request Forgery Vulnerability (CNVD-2021-19687)

SeedDMS is a free document management system with an easy-to-use web-based user interface. A cross-site request forgery vulnerability exists in out.EditDocument.php in SeedDMS 5.1.. An attacker can exploit this vulnerability to edit a victim's document...

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

CVE-2021-26215

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

Cross site request forgery (csrf)

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

Cross site request forgery (csrf)

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditDocument.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by cross-site request forgery CSRF in out.EditFolder.php...

CVE-2021-26216

SeedDMS 5.1.x is affected by a Cross-Site Request Forgery (CSRF) in out.EditFolder.php, as documented across multiple sources (SeedDMS and CNVD). The vulnerability allows CSRF to trigger actions that can lead to editing a victim’s document. Root cause details are not explicitly provided beyond th...