letodms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

letodms records in CISA KEV

No letodms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Letodms 2 records LOW

Records

4 records

TI-2010-01922 CVE-2010-2006 · GHSA-7c42-8pjf-wmc2

Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2…

LOW 38

Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.06688 Published 2010-05-20 No fix listed CWE-22

TI-2012-03728 CVE-2012-4385 · GHSA-473p-3w6p-6xp8

letodms 3.3.6 has CSRF via change password

LOW 32

letodms 3.3.6 has CSRF via change password

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01562 Published 2019-11-13 No fix listed CWE-352

TI-2010-01923 CVE-2010-2007 · GHSA-rr2v-rm35-c7f7

Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS)…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use (1) op/op.EditUserData.…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00664 Published 2010-05-20 No fix listed CWE-352

TI-2012-03727 CVE-2012-4384 · GHSA-8jmx-j32j-73mj

Cross-site scripting in letodms

LOW 30

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01554 Published 2019-11-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0