Letodms Project Letodms
4 CVEs affecting Letodms Project Letodms. Latest disclosed: 2017-10-23. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-4570 | Critical | 9.8 | 2017-10-23 | SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL com… |
CVE-2012-4568 | High | 8.8 | 2017-10-23 | Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the authentication of unsp… |
CVE-2012-4569 | Medium | 6.1 | 2017-10-23 | Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers to inject arbitrary w… |
CVE-2012-4567 | Medium | 6.1 | 2017-10-23 | Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via… |