CVE-2019-25684

概要

参考情報

• sourceforge.net/projects/opendocman/files · Product
• exploit-db.com/exploits/46500 · Exploit
• vulncheck.com/advisories/opendocman-sql-injection-via-where-parameter · Third Party Advisory

opendocman のその他の脆弱性

• CVE-2021-45834緊急 9.8An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be autom…
• CVE-2014-1946高 8.8OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended acces…
• CVE-2015-5625中 4.3Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the r…
• CVE-2014-4853中 4.3Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary …
• CVE-2014-2317中 6.8SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the t…