CVE-2019-12744

概要

参考情報

• packetstormsecurity.com/files/153383/SeedDMS-Remote-Command-Execution.html
• packetstormsecurity.com/files/163283/Seeddms-5.1.10-Remote-Command-Execution.html
• secfolks.blogspot.com/2019/06/exploit-for-cve-2019-12744-remote.html · Exploit
• sourceforge.net/p/seeddms/code/ci/master/tree/CHANGELOG · Release Notes

seeddms のその他の脆弱性

• CVE-2025-45752高 7.2A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functi…
• CVE-2025-45754中 5.4A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaSc…
• CVE-2025-25461中 5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inj…
• CVE-2024-46409中 5.4A stored cross-site scripting (XSS) vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting…
• CVE-2021-39421中 6.1A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa…