İçeriğe atla
Noroxi

OpenDocMan kayıtları

opendocman üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 22
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2021-45834
    40Planlayın

    An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be autom

    KritikCVSS 9,8İstismar yokEPSS %2

    opendocman · opendocman18 Mar 2022

  • CVE-2014-1946
    36İzleyin

    OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended acces

    YüksekCVSS 8,8İstismar yokEPSS %2

    opendocman · opendocman10 Nis 2018

  • CVE-2019-25684
    35İzleyin

    OpenDocMan 1.3.4 SQL Injection via where Parameter

    YüksekCVSS 8,8İstismar yokEPSS %0

    opendocman · opendocman5 Nis 2026

  • CVE-2014-1945
    30İzleyin

    SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the a

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    opendocman · opendocman9 Mar 2014

  • CVE-2009-3788
    30İzleyin

    SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka

    YüksekCVSS 7,5İstismar yokEPSS %1

    opendocman · opendocman26 Eki 2009

  • CVE-2006-5655
    30İzleyin

    SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username para

    YüksekCVSS 7,5İstismar yokEPSS %1

    opendocman · opendocman2 Kas 2006

  • CVE-2009-3801
    30İzleyin

    SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass (aka

    YüksekCVSS 7,5İstismar yokEPSS %1

    opendocman · opendocman27 Eki 2009

  • CVE-2014-2317
    27İzleyin

    SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the t

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    opendocman · opendocman9 Mar 2014

  • CVE-2015-5625
    24İzleyin

    Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the r

    OrtaCVSS 4,3İstismar yokEPSS %22

    opendocman · opendocman7 Eyl 2015

  • CVE-2011-3764
    20İzleyin

    OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals t

    OrtaCVSS 5,0İstismar yokEPSS %1

    opendocman · opendocman23 Eyl 2011

  • CVE-2009-3789
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via th

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    opendocman · opendocman26 Eki 2009

  • CVE-2014-4853
    18İzleyin

    Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary

    OrtaCVSS 4,3İstismar yokEPSS %1

    opendocman · opendocman10 Tem 2014

  • CVE-2008-2787
    18İzleyin

    Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via t

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    opendocman · opendocman20 Haz 2008

  • CVE-2008-2788
    17İzleyin

    Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via

    OrtaCVSS 4,3İstismar yokEPSS %0

    opendocman · opendocman20 Haz 2008