Docman

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Docman records in CISA KEV

No Docman vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Docman · all components

TI-2007-00368 CVE-2007-0378 · GHSA-whg6-5prw-47q8

LOW 35

Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2007-01-19 No fix listed

TI-2007-00369 CVE-2007-0379 · GHSA-r25j-r7m5-6qj3

LOW 33

Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01238 Published 2007-01-19 No fix listed

TI-2007-00370 CVE-2007-0380 · GHSA-2v6g-rp78-v38x

LOW 26

DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01316 Published 2007-01-19 No fix listed