showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .properties file extensions in the application's file upload feature. An attacker could exploit this...

GHSA-GQ77-3R6X-383W Cross-site Scripting in ShowDoc

ShowDoc version 2.10.3 and prior is vulnerable to stored cross-site scripting. A patch is available and anticipated to be part of version 2.10.4...

Cross-site Scripting in ShowDoc

ShowDoc version 2.10.3 and prior is vulnerable to stored cross-site scripting. A patch is available and anticipated to be part of version 2.10.4...

CVE-2022-0880

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

CVE-2022-0880 Cross-site Scripting (XSS) - Stored in star7th/showdoc

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

CVE-2022-0880

CVE-2022-0880 affects ShowDoc (star7th/showdoc) up to version 2.10.2, with stored XSS via attachments in the File Library (notably XML uploads) as reported by multiple sources. The vulnerability arises from stored XSS in the web interface when handling uploaded attachments, leading to script exec...

Stored xss in showdoc through file upload

Description Hi. This is a bypass to the report in https://huntr.dev/bounties/df347aa9-ed9b-4f75-af99-c83b8aad3bcf/ . It fails to check for files with the extension .shtml which leads to stored xss Proof of Concept // poc.shtml adsasdadsdsa alert1 Impact Stored Xss...

showdoc 跨站脚本漏洞

showdoc is open source a great tool for IT teams to share documents online. A security vulnerability exists in showdoc before 2.10.2. The vulnerability allowed .xml to store cross-site scripting attack payloads via uploaded attachments in the format found in the document library...

showdoc code issue vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a code issue vulnerability that stems from unrestricted uploading of files with dangerous types. No details of the vulnerability are currently available...

Arbitrary File Upload

showdoc/showdoc is vulnerable to arbitrary file upload attacks. The vulnerability exists through AttachmentController.class.php where the attachmentUpload function does not properly validate the upload files, allowing an attacker to upload a malicious crafted file and remotely execute arbitrary...

GHSA-6X3J-X9RP-WHXP Unrestricted Upload of File with Dangerous Type in showdoc

showdoc prior to 2.10.2 is vulnerable to Unrestricted Upload of File with Dangerous Type...

Unrestricted Upload of File with Dangerous Type in showdoc

showdoc prior to 2.10.2 is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2022-0409

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

CVE-2022-0409

CVE-2022-0409 affects showdoc/showdoc prior to version 2.10.2. Multiple connected sources (Red Hat, OSV, CVE trackers) describe an unrestricted upload of files with dangerous types as the underlying issue in the Packagist showdoc project. The vulnerability enables attackers to upload arbitrary fi...

CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

showdoc 代码问题漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a code issue vulnerability that stems from unrestricted uploading of files with dangerous types. No details of the vulnerability are currently available...

Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...