Vulnerabilities

3 records

Sort

TI-2007-00370 CVE-2007-0380 · GHSA-2v6g-rp78-v38x

DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.

LOW 26

DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01316 Published 2007-01-19 No fix listed

TI-2007-00369 CVE-2007-0379 · GHSA-r25j-r7m5-6qj3

LOW 33

Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01238 Published 2007-01-19 No fix listed

TI-2007-00368 CVE-2007-0378 · GHSA-whg6-5prw-47q8

LOW 35

Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2007-01-19 No fix listed