CVE-2019-25684

Mô tả

Tham khảo

• sourceforge.net/projects/opendocman/files · Product
• exploit-db.com/exploits/46500 · Exploit
• vulncheck.com/advisories/opendocman-sql-injection-via-where-parameter · Third Party Advisory

Lỗ hổng khác của opendocman

• CVE-2021-45834NGHIÊM TRỌNG 9.8An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be autom…
• CVE-2014-1946CAO 8.8OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended acces…
• CVE-2015-5625TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the r…
• CVE-2014-4853TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary …
• CVE-2014-2317TRUNG BÌNH 6.8SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the t…