CVE-2025-0520 | | | 2025-04-29 | An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code… |
CVE-2022-1034 | High | 7.2 | 2022-03-22 | There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0967 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0966 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10. |
CVE-2022-0965 | Medium | 5.4 | 2022-03-15 | Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0964 | Medium | 5.4 | 2022-03-15 | Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0942 | Medium | 5.4 | 2022-03-15 | Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0957 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0956 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4. |
CVE-2022-0951 | Medium | 6.1 | 2022-03-15 | File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0950 | Medium | 5.4 | 2022-03-15 | Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0945 | Medium | 5.4 | 2022-03-15 | Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4. |
CVE-2022-0962 | Medium | 5.4 | 2022-03-14 | Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0960 | Medium | 5.4 | 2022-03-14 | Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0946 | Medium | 5.4 | 2022-03-14 | Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4. |
CVE-2022-0941 | Medium | 5.4 | 2022-03-14 | Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. |
CVE-2022-0940 | Medium | 5.4 | 2022-03-14 | Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4. |
CVE-2022-0938 | Medium | 5.4 | 2022-03-14 | Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4. |
CVE-2022-0937 | Medium | 5.4 | 2022-03-14 | Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0880 | Medium | 5.4 | 2022-03-12 | Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2. |
CVE-2022-0409 | High | 7.8 | 2022-02-19 | Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2. |
CVE-2022-0362 | Critical | 9.8 | 2022-01-26 | SQL Injection in Packagist showdoc/showdoc prior to 2.10.3. |
CVE-2021-4172 | Medium | 5.4 | 2022-01-22 | Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2. |
CVE-2022-0079 | Medium | 5.3 | 2022-01-03 | showdoc is vulnerable to Generation of Error Message Containing Sensitive Information |
CVE-2021-4168 | High | 8.8 | 2021-12-26 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-4000 | Medium | 6.1 | 2021-12-03 | showdoc is vulnerable to URL Redirection to Untrusted Site |
CVE-2021-4017 | High | 8.8 | 2021-12-01 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-3993 | Medium | 6.5 | 2021-12-01 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-3990 | Medium | 6.5 | 2021-12-01 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) |
CVE-2021-3989 | Medium | 6.1 | 2021-12-01 | showdoc is vulnerable to URL Redirection to Untrusted Site |
CVE-2021-3776 | Medium | 5.4 | 2021-11-13 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-3775 | Medium | 5.4 | 2021-11-13 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-3683 | Medium | 6.5 | 2021-11-13 | showdoc is vulnerable to Cross-Site Request Forgery (CSRF) |
CVE-2021-41745 | Critical | 9.8 | 2021-10-22 | ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions. |
CVE-2021-36440 | Critical | 9.8 | 2021-09-08 | Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateControlle… |
CVE-2021-3678 | Medium | 5.9 | 2021-08-04 | showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) |
CVE-2021-3680 | Medium | 4.9 | 2021-08-04 | showdoc is vulnerable to Missing Cryptographic Step |
CVE-2018-19621 | Medium | 6.5 | 2018-11-28 | server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team. |
CVE-2018-19620 | Medium | 4.3 | 2018-11-28 | ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id. |
CVE-2018-19609 | Medium | 6.5 | 2018-11-27 | ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discov… |
CVE-2018-19433 | Medium | 6.1 | 2018-11-22 | ShowDoc 2.4.1 has XSS via the lang parameter because install/database.php mishandles the $cur_lang value. |
CVE-2018-16342 | Medium | 5.4 | 2018-09-02 | ShowDoc v1.8.0 has XSS via a new page. |