CVE-2022-28051

概要

参考情報

• looCiprian/Responsible-Vulnerability-Disclosure · Third Party Advisory
• looCiprian/Responsible-Vulnerability-Disclosure · Exploit
• sourceforge.net/p/seeddms/code/ci/6fc17be5d95e8f00fbe5c124c4acd377fa2ce69d · Patch

seeddms のその他の脆弱性

• CVE-2025-45752高 7.2A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functi…
• CVE-2025-45754中 5.4A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaSc…
• CVE-2025-25461中 5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inj…
• CVE-2024-46409中 5.4A stored cross-site scripting (XSS) vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting…
• CVE-2021-39421中 6.1A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa…