Skip to content
OpenAdvisories

Vendor

Simple E-Document

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2014-125126 Public exploit

    Simple E-Document Arbitrary File Upload RCE

    An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cookie header (access=3) with HTTP requests. The application’s upload mechanism fa…