PatchFirst · Latest vulnerabilities

showdoc/showdoc 2.4.2: known vulnerabilities · Page 2

Known vulnerabilities affecting showdoc/showdoc 2.4.2: 39. Compare the fixes below with your installed release.

RSS ↗ JSON ↗

Vulnerabilities: 39

CVE-2022-0880
High · CVSS 7.6EPSS 0.74%Fix available
Cross-site Scripting (XSS) - Stored in star7th/showdoc
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
showdoc/showdoc PHP
- Update to 2.10.4
Published March 12, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0409
High · CVSS 7.2EPSS 0.94%Fix available
Unrestricted Upload of File with Dangerous Type in star7th/showdoc
Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.
showdoc/showdoc PHP
- Update to 2.10.2
Published February 19, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0362
Medium · CVSS 6.7EPSS 1.47%Fix available
SQL Injection in star7th/showdoc
SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.
showdoc/showdoc PHP
- Update to 2.10.3
Published January 26, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4172
Medium · CVSS 6.5EPSS 0.64%Fix available
Cross-site Scripting (XSS) - Stored in star7th/showdoc
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
showdoc/showdoc PHP
- Update to 2.10.2
Published January 22, 2022Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0079
Medium · CVSS 5.3EPSS 1%Fix available
Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
showdoc/showdoc PHP
- Update to 2.10.0
Published January 3, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4168
Medium · CVSS 6.3EPSS 0.63%Fix available
Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc/showdoc PHP
- Update to 2.9.15
Published December 26, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4000
Medium · CVSS 6.5EPSS 0.85%No fix published
Open Redirect in star7th/showdoc
showdoc is vulnerable to URL Redirection to Untrusted Site
showdoc/showdoc PHP
Published December 3, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3989
Medium · CVSS 6.5EPSS 0.79%Fix available
Open Redirect in star7th/showdoc
showdoc is vulnerable to URL Redirection to Untrusted Site
showdoc/showdoc PHP
- Update to 2.9.13
Published December 1, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3990
Medium · CVSS 6.5EPSS 0.89%Fix available
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
showdoc/showdoc PHP
- Update to 2.9.13
Published December 1, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3993
Medium · CVSS 4.3EPSS 0.52%Fix available
Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc/showdoc PHP
- Update to 2.9.13
Published December 1, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4017
High · CVSS 7.3EPSS 0.62%Fix available
Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc/showdoc PHP
- Update to 2.9.13
Published December 1, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3683
Medium · CVSS 5.4EPSS 0.41%No fix published
Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc/showdoc PHP
Published November 13, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3775
Medium · CVSS 4.3EPSS 0.41%No fix published
Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc/showdoc PHP
Published November 13, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3776
Medium · CVSS 4.3EPSS 0.41%Fix available
Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc/showdoc PHP
- Update to 2.9.13
Published November 13, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-41745
Critical · CVSS 9.8EPSS 1.39%Fix available
CVE-2021-41745
ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions.
showdoc/showdoc PHP
- Update to 2.8.5
Published October 22, 2021Updated August 4, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-36440
Critical · CVSS 9.8EPSS 4.76%Fix available
CVE-2021-36440
Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'.
showdoc/showdoc PHP
- Update to 2.9.6
Published September 8, 2021Updated August 4, 2024
Source advisory 1 ↗Source advisory 2 ↗
CVE-2021-3678
High · CVSS 7.5EPSS 1.06%Fix available
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
showdoc/showdoc PHP
- Update to 2.9.8
Published August 4, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3680
Medium · CVSS 5.3EPSS 0.46%No fix published
Missing Cryptographic Step in star7th/showdoc
showdoc is vulnerable to Missing Cryptographic Step
showdoc/showdoc PHP
Published August 4, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2018-19621
Medium · CVSS 6.5EPSS 0.45%No fix published
CVE-2018-19621
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
showdoc/showdoc PHP
Published November 28, 2018Updated September 17, 2024
Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

showdoc/showdoc 2.4.2: known vulnerabilities · Page 2

Cross-site Scripting (XSS) - Stored in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in star7th/showdoc

SQL Injection in star7th/showdoc

Cross-site Scripting (XSS) - Stored in star7th/showdoc

Generation of Error Message Containing Sensitive Information in star7th/showdoc

Cross-Site Request Forgery (CSRF) in star7th/showdoc

Open Redirect in star7th/showdoc

Open Redirect in star7th/showdoc

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

Cross-Site Request Forgery (CSRF) in star7th/showdoc

Cross-Site Request Forgery (CSRF) in star7th/showdoc

Cross-Site Request Forgery (CSRF) in star7th/showdoc

Cross-Site Request Forgery (CSRF) in star7th/showdoc

Cross-Site Request Forgery (CSRF) in star7th/showdoc

CVE-2021-41745

CVE-2021-36440

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

Missing Cryptographic Step in star7th/showdoc

CVE-2018-19621

Check your server