CVE-2024-46409

概要

参考情報

• demo6.seeddms.org/out/out.LogManagement.php · Permissions Required
• packetstormsecurity.com/files/181974/SeedDMS-6.0.28-Cross-Site-Scripting.html · Exploit

seeddms のその他の脆弱性

• CVE-2025-45752高 7.2A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functi…
• CVE-2025-45754中 5.4A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaSc…
• CVE-2025-25461中 5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inj…
• CVE-2021-39421中 6.1A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa…
• CVE-2021-39425中 6.1SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to ar…