File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-0951 · ADVISORY
• star7th/showdoc commit 237ac6d · WEB
• star7th/showdoc · PACKAGE
• huntr.dev/bounties/b3a983a3-17f9-4aa8-92d7-8a0c92a93932 · WEB

Lỗ hổng khác của showdoc/showdoc

• CVE-2026-6982TRUNG BÌNH 6.3A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of t…
• CVE-2025-0520NGHIÊM TRỌNG 9.4An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, lead…
• CVE-2022-1034CAO 7.2There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.
• CVE-2022-0967TRUNG BÌNH 5.4Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.
• CVE-2022-0966TRUNG BÌNH 5.4Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.