GHSA-7X22-PMW5-66MQ Cross-site Scripting in showdoc

Stored XSS via upload attachment with format .svg in File Library...

showdoc uid Parameter SQL Injection Vulnerability

showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...

SQL Injection

showdoc/showdoc is vulnerable to SQL Injection attacks. The library does not properly sanitize the uid parameter which is an user input, allowing a malicious user to inject and execute arbitrary SQL queries on the server...

SQL Injection in showdoc

Showdoc verions 2.10.2 and prior is vulnerable to SQL injection. A patch is available in the master branch of the repository...

GHSA-9CQ5-XGG4-X477 SQL Injection in showdoc

Showdoc verions 2.10.2 and prior is vulnerable to SQL injection. A patch is available in the master branch of the repository...

CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

Sql injection

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362 SQL Injection in star7th/showdoc

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

CVE-2022-0362

The CVE-2022-0362 vulnerability affects the showdoc/showdoc package (Packagist) versions prior to 2.10.3. The root cause is improper validation of the uid parameter, which enables an SQL injection. This can allow an attacker to execute arbitrary SQL commands with the potential for data exposure o...

CVE-2022-0362 SQL Injection in star7th/showdoc

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3...

showdoc SQL注入漏洞

showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...

SQL Injection in star7th/showdoc

Description The uid parameter does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection. Proof of Concept Time based: POST /server/index.php?s=/api/adminUser/addUser HTTP/1.1 Content-Type: application/x-www-form-urlencoded Accept:...

showdoc cross-site scripting vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code...

CVE-2021-4172

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

CVE-2021-4172

CVE-2021-4172 refers to a Stored XSS in the open-source tool showdoc (GitHub star7th/showdoc) prior to version 2.10.2. Multiple connected sources confirm the vulnerability arises from improper validation of client-side data in the File Library, where uploading an SVG (PoC) can execute script code...

CVE-2021-4172 Cross-site Scripting (XSS) - Stored in star7th/showdoc

Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...

showdoc 跨站脚本漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code...

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...