Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2...

CVE-2022-0409

CVE-2022-0409 affects showdoc/showdoc prior to version 2.10.2. Multiple connected sources (Red Hat, OSV, CVE trackers) describe an unrestricted upload of files with dangerous types as the underlying issue in the Packagist showdoc project. The vulnerability enables attackers to upload arbitrary fi...

showdoc 代码问题漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a code issue vulnerability that stems from unrestricted uploading of files with dangerous types. No details of the vulnerability are currently available...

GHSA-7X22-PMW5-66MQ Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...

Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...

showdoc uid Parameter SQL Injection Vulnerability

showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...

SQL Injection

showdoc/showdoc is vulnerable to SQL Injection attacks. The library does not properly sanitize the uid parameter which is an user input, allowing a malicious user to inject and execute arbitrary SQL queries on the server...

GHSA-9CQ5-XGG4-X477 SQL Injection in showdoc

Showdoc verions 2.10.2 and prior is vulnerable to SQL injection. A patch is available in the master branch of the repository...

SQL Injection in showdoc

Showdoc verions 2.10.2 and prior is vulnerable to SQL injection. A patch is available in the master branch of the repository...

CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

Sql injection

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362

The CVE-2022-0362 vulnerability affects the showdoc/showdoc package (Packagist) versions prior to 2.10.3. The root cause is improper validation of the uid parameter, which enables an SQL injection. This can allow an attacker to execute arbitrary SQL commands with the potential for data exposure o...

CVE-2022-0362 SQL Injection in star7th/showdoc

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362 SQL Injection in star7th/showdoc

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

showdoc SQL注入漏洞

showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...

SQL Injection in star7th/showdoc

Description The uid parameter does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection. Proof of Concept Time based: POST /server/index.php?s=/api/adminUser/addUser HTTP/1.1 Content-Type: application/x-www-form-urlencoded Accept:...

showdoc cross-site scripting vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code...