Kordil Edms Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kordil Edms Project records in CISA KEV

No Kordil Edms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2020-10868 CVE-2020-13887 · GHSA-qpq6-wjc5-2x3x

MEDIUM 43

documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02445 Published 2020-06-22 No fix listed CWE-434

TI-2020-10869 CVE-2020-13888 · GHSA-hg5w-7hm2-3vxp

LOW 25

Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2020-06-22 No fix listed CWE-79