Vulnerabilities

TI-2010-01923 CVE-2010-2007 · GHSA-rr2v-rm35-c7f7

Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS)…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use (1) op/op.EditUserData.…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00664 Published 2010-05-20 No fix listed CWE-352

TI-2010-01922 CVE-2010-2006 · GHSA-7c42-8pjf-wmc2

Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2…

LOW 38

Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.06688 Published 2010-05-20 No fix listed CWE-22

Vulnerabilities

Filters

Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS)…

Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2…