Show filters
41 Total Results
Displaying 31-40 of 41
Sort by:
Attacker Value
Unknown
CVE-2021-3775
Disclosure Date: November 13, 2021 (last updated February 23, 2025)
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
0
Attacker Value
Unknown
CVE-2021-3683
Disclosure Date: November 13, 2021 (last updated February 23, 2025)
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
0
Attacker Value
Unknown
CVE-2021-41745
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions.
0
Attacker Value
Unknown
CVE-2021-36440
Disclosure Date: September 08, 2021 (last updated February 23, 2025)
Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'.
0
Attacker Value
Unknown
CVE-2021-3678
Disclosure Date: August 04, 2021 (last updated February 23, 2025)
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
0
Attacker Value
Unknown
CVE-2021-3680
Disclosure Date: August 04, 2021 (last updated February 23, 2025)
showdoc is vulnerable to Missing Cryptographic Step
0
Attacker Value
Unknown
CVE-2018-19620
Disclosure Date: November 28, 2018 (last updated November 27, 2024)
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.
0
Attacker Value
Unknown
CVE-2018-19621
Disclosure Date: November 28, 2018 (last updated November 27, 2024)
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
0
Attacker Value
Unknown
CVE-2018-19609
Disclosure Date: November 27, 2018 (last updated November 27, 2024)
ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL.
0
Attacker Value
Unknown
CVE-2018-19433
Disclosure Date: November 22, 2018 (last updated November 27, 2024)
ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value.
0
