showdoc/showdoc

22 results · Clear filters · Feed

• Medium 6.3
  CVE-2026-6982

  star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection

  A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a…

  star7th showdoc showdoc/showdoc Packagist
  Apr 25, 2026
• Medium 6.4
  CVE-2022-0966

  Stored XSS via File Upload in star7th/showdoc in star7th/showdoc

  Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 15, 2022
• Medium 6.9
  CVE-2022-0967 Public exploit

  Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc

  Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 15, 2022
• Medium 6.5
  CVE-2022-0950

  Unrestricted Upload of File with Dangerous Type in star7th/showdoc

  Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 15, 2022
• Medium 6.3
  CVE-2022-0940

  Stored XSS due to Unrestricted File Upload in star7th/showdoc

  Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 14, 2022
• Medium 6.3
  CVE-2022-0937

  Stored xss in showdoc through file upload in star7th/showdoc

  Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 14, 2022
• Medium 6.7
  CVE-2022-0362

  SQL Injection in star7th/showdoc

  SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Jan 26, 2022
• Medium 6.5
  CVE-2021-4172

  Cross-site Scripting (XSS) - Stored in star7th/showdoc

  Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Jan 22, 2022
• Medium 5.3
  CVE-2022-0079

  Generation of Error Message Containing Sensitive Information in star7th/showdoc

  showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

  star7th star7th/showdoc showdoc/showdoc Packagist
  Jan 3, 2022
• Medium 6.3
  CVE-2021-4168

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 26, 2021
• Medium 6.5
  CVE-2021-4000

  Open Redirect in star7th/showdoc

  showdoc is vulnerable to URL Redirection to Untrusted Site

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 3, 2021
• Medium 6.5
  CVE-2021-3989

  Open Redirect in star7th/showdoc

  showdoc is vulnerable to URL Redirection to Untrusted Site

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 6.5
  CVE-2021-3990

  Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

  showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 4.3
  CVE-2021-3993

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 5.4
  CVE-2021-3683

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Nov 13, 2021
• Medium 4.3
  CVE-2021-3775

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Nov 13, 2021
• Medium 4.3
  CVE-2021-3776

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Nov 13, 2021
• Medium 5.3
  CVE-2021-3680

  Missing Cryptographic Step in star7th/showdoc

  showdoc is vulnerable to Missing Cryptographic Step

  star7th star7th/showdoc showdoc/showdoc Packagist
  Aug 4, 2021
• Medium 6.5
  CVE-2018-19621

  Showdoc CSRF Vulnerability

  server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.

  showdoc/showdoc Packagist
  Nov 28, 2018
• Medium 4.3
  CVE-2018-19620

  Showdoc Unauthenticated Access

  ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.

  showdoc/showdoc Packagist
  Nov 28, 2018
• Medium 6.5
  CVE-2018-19609

  Showdoc Forced Browsing

  ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL.

  showdoc/showdoc Packagist
  Nov 27, 2018
• Medium 5.4
  CVE-2018-16342

  Showdoc XSS Vulnerability

  ShowDoc v1.8.0 has XSS via a new page.

  showdoc/showdoc Packagist
  Sep 2, 2018