Opendocman
13 CVEs across 1 Opendocman products. Browse Opendocman vulnerabilities, severities, and proof-of-concept exploits.
Opendocman products with known CVEs
Opendocman CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2019-25684 | High | 8.2 | 2026-04-05 | OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the… |
CVE-2021-45834 | Critical | 9.8 | 2022-03-18 | An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed… |
CVE-2014-1946 | High | 8.8 | 2018-04-10 | OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and… |
CVE-2015-5625 | | | 2015-09-07 | Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the redirection paramete… |
CVE-2014-4853 | | | 2014-07-10 | Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary web script or HTML… |
CVE-2014-2317 | | | 2014-03-09 | SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the table parameter. NO… |
CVE-2014-1945 | | | 2014-03-09 | SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter. |
CVE-2011-3764 | | | 2011-09-24 | OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation pat… |
CVE-2009-3801 | | | 2009-10-27 | SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass (aka Password) parameter… |
CVE-2009-3789 | | | 2009-10-26 | Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the last_message para… |
CVE-2009-3788 | | | 2009-10-26 | SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter. |
CVE-2008-2788 | | | 2008-06-20 | Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection pa… |
CVE-2008-2787 | | | 2008-06-20 | Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the last_message par… |
CVE-2006-5655 | | | 2006-11-03 | SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter. |