Package · Packagist

showdoc/showdoc

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

42 results · Feed

Medium 6.3

CVE-2026-6982

star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection

A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a…

star7th showdoc showdoc/showdoc Packagist

Apr 25, 2026
Critical 9.4

CVE-2025-0520 Scanner template

ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.

ShowDoc ShowDoc showdoc/showdoc Packagist

Apr 29, 2025
Critical 9.1

CVE-2022-1034

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 22, 2022
High 8.0

CVE-2022-0964

Stored XSS viva .webmv file upload in star7th/showdoc

Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
Critical 9.0

CVE-2022-0965

Stored XSS viva .ofd file upload in star7th/showdoc

Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
Medium 6.4

CVE-2022-0966

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc

Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
Medium 6.9

CVE-2022-0967 Public exploit

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
Critical 9.4

CVE-2022-0942

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
High 7.6

CVE-2022-0957

Stored XSS via File Upload in star7th/showdoc

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
High 7.1

CVE-2022-0956

Stored XSS via File Upload in star7th/showdoc

Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
High 8.2

CVE-2022-0951

File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc

File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
Medium 6.5

CVE-2022-0950

Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
Critical 9.0

CVE-2022-0945

Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc

Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 15, 2022
Critical 9.0

CVE-2022-0962

Stored XSS viva .webma file upload in star7th/showdoc

Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 14, 2022
Critical 9.0

CVE-2022-0960

Stored XSS viva .properties file upload in star7th/showdoc

Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 14, 2022
Critical 9.0

CVE-2022-0946

Stored XSS viva cshtm file upload in star7th/showdoc

Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 14, 2022
High 7.3

CVE-2022-0941

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 14, 2022
Medium 6.3

CVE-2022-0940

Stored XSS due to Unrestricted File Upload in star7th/showdoc

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 14, 2022
High 7.1

CVE-2022-0938

Stored XSS via file upload in star7th/showdoc

Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 14, 2022
Medium 6.3

CVE-2022-0937

Stored xss in showdoc through file upload in star7th/showdoc

Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 14, 2022
High 7.6

CVE-2022-0880

Cross-site Scripting (XSS) - Stored in star7th/showdoc

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

star7th star7th/showdoc showdoc/showdoc Packagist

Mar 12, 2022
High 7.2

CVE-2022-0409

Unrestricted Upload of File with Dangerous Type in star7th/showdoc

Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.

star7th star7th/showdoc showdoc/showdoc Packagist

Feb 19, 2022
Medium 6.7

CVE-2022-0362

SQL Injection in star7th/showdoc

SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.

star7th star7th/showdoc showdoc/showdoc Packagist

Jan 26, 2022
Medium 6.5

CVE-2021-4172

Cross-site Scripting (XSS) - Stored in star7th/showdoc

Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

star7th star7th/showdoc showdoc/showdoc Packagist

Jan 22, 2022
Medium 5.3

CVE-2022-0079

Generation of Error Message Containing Sensitive Information in star7th/showdoc

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

star7th star7th/showdoc showdoc/showdoc Packagist

Jan 3, 2022
Medium 6.3

CVE-2021-4168

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th star7th/showdoc showdoc/showdoc Packagist

Dec 26, 2021
Medium 6.5

CVE-2021-4000

Open Redirect in star7th/showdoc

showdoc is vulnerable to URL Redirection to Untrusted Site

star7th star7th/showdoc showdoc/showdoc Packagist

Dec 3, 2021
Medium 6.5

CVE-2021-3989

Open Redirect in star7th/showdoc

showdoc is vulnerable to URL Redirection to Untrusted Site

star7th star7th/showdoc showdoc/showdoc Packagist

Dec 1, 2021
Medium 6.5

CVE-2021-3990

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

star7th star7th/showdoc showdoc/showdoc Packagist

Dec 1, 2021
Medium 4.3

CVE-2021-3993

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th star7th/showdoc showdoc/showdoc Packagist

Dec 1, 2021
High 7.3

CVE-2021-4017

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th star7th/showdoc showdoc/showdoc Packagist

Dec 1, 2021
Medium 5.4

CVE-2021-3683

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th star7th/showdoc showdoc/showdoc Packagist

Nov 13, 2021
Medium 4.3

CVE-2021-3775

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th star7th/showdoc showdoc/showdoc Packagist

Nov 13, 2021
Medium 4.3

CVE-2021-3776

Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

star7th star7th/showdoc showdoc/showdoc Packagist

Nov 13, 2021
Critical 9.8

CVE-2021-41745

Showdoc File Upload Vulnerability

ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions.

showdoc/showdoc Packagist

Oct 22, 2021
Critical 9.8

CVE-2021-36440

Unrestricted File Upload in ShowDoc v2.9.5

Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component AdminUpdateController.class.php'.

showdoc/showdoc Packagist

Sep 8, 2021
High 7.5

CVE-2021-3678

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

star7th star7th/showdoc showdoc/showdoc Packagist

Aug 4, 2021
Medium 5.3

CVE-2021-3680

Missing Cryptographic Step in star7th/showdoc

showdoc is vulnerable to Missing Cryptographic Step

star7th star7th/showdoc showdoc/showdoc Packagist

Aug 4, 2021
Medium 6.5

CVE-2018-19621

Showdoc CSRF Vulnerability

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.

showdoc/showdoc Packagist

Nov 28, 2018
Medium 4.3

CVE-2018-19620

Showdoc Unauthenticated Access

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.

showdoc/showdoc Packagist

Nov 28, 2018