TI-2012-03728 CVE-2012-4385 · GHSA-473p-3w6p-6xp8
letodms 3.3.6 has CSRF via change password
Priority LOW 32
letodms 3.3.6 has CSRF via change password
Vulnerabilities
4 records
TI-2012-03727 CVE-2012-4384 · GHSA-8jmx-j32j-73mj
Cross-site scripting in letodms
Priority LOW 30
letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar
TI-2010-01923 CVE-2010-2007 · GHSA-rr2v-rm35-c7f7
Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS)…
Priority LOW 31
Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) 1.7.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that use (1) op/op.EditUserData.…
TI-2010-01922 CVE-2010-2006 · GHSA-7c42-8pjf-wmc2
Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2…
Priority LOW 38
Directory traversal vulnerability in op/op.Login.php in LetoDMS (formerly MyDMS) 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a ..