CVE-2021-39425

SeedDMS v6.0.15 contains an open redirect vulnerability: an attacker can lure a user into clicking a crafted link to redirect to an arbitrary URL. This affects SeedDMS’s web interface and originates from an open redirect in the application flow. The reported impact is user redirection; no exploit...

SeedDMS 输入验证错误漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used to store and share documents. A security vulnerability exists in SeedDMS version v6.0.15, which stems from an open redirection vulnerability that can b...

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

Arbitrary file deletion

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

PT-2023-12199 · Seeddms · Seeddms

Name of the Vulnerable Software and Affected Versions: SeedDMS version 6.0.15 Description: An issue in SeedDMS allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file. Recommendations: For SeedDMS version 6.0.15, consider restricting access to the...

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

CVE-2021-33223

SeedDMS 6.0.15 contains a privilege-escalation issue that can be triggered through the userid and role parameters in the out.UsrMgr.php file. The vulnerability allows an attacker to elevate privileges within SeedDMS per multiple sources (e.g., Red Hat advisory and other mappings), with CVSS v3.1 ...

SeedDMS 安全漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS version 6.0.15, which originated from a vulnerability that allows an...

CVE-2021-33223

An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file...

CVE-2022-44938

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

CVE-2022-44938

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

Design/Logic Flaw

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

SeedDMS 安全漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is mainly used for storing and sharing documents. A security vulnerability exists in SeedDMS versions v6.0.20 and v5.1.7, which stems from weak reset token generation...

CVE-2022-44938

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

PT-2022-27339 · Seeddms · Seeddms

Name of the Vulnerable Software and Affected Versions: SeedDMS versions 5.1.7 through 6.0.20 Description: The issue is related to weak reset token generation, allowing attackers to execute a full account takeover via a brute force attack. Recommendations: For SeedDMS version 5.1.7, update to a...

CVE-2022-44938

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack...

CVE-2022-44938

The CVE-2022-44938 issue concerns SeedDMS v6.0.20 and v5.1.7, where weak reset token generation enables full account takeovers via brute force. According to sources (Red Hat, CNNVD/CVELIST, and vulnerability trackers), the vulnerability stems from insufficient randomness/verification in the accou...

SeedDMS Cross-Site Scripting Vulnerability (CNVD-2022-66667)

SeedDMS formerly known as LetoDMS and MyDMS is a PHP and MySql based document management system used to store and share documents. SeedDMS versions 6.0.18 and 5.1.25 contain a cross-site scripting vulnerability that stems from the Add category function in the Global Keyword menu, which is prone t...