star7th

19 results · Clear filters · Feed

• Medium 4.2
  CVE-2026-119661

  ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries

  ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that checks edit permission only for the first supplied entry id. Authenticated attackers can place their own entry id first and append other u…

  star7th showdoc
  Oct 30, 2026
• Medium 6.3
  CVE-2026-6982

  star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection

  A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a…

  star7th showdoc showdoc/showdoc Packagist
  Apr 25, 2026
• Medium 6.4
  CVE-2022-0966

  Stored XSS via File Upload in star7th/showdoc in star7th/showdoc

  Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 15, 2022
• Medium 6.9
  CVE-2022-0967 Public exploit

  Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc

  Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 15, 2022
• Medium 6.5
  CVE-2022-0950

  Unrestricted Upload of File with Dangerous Type in star7th/showdoc

  Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 15, 2022
• Medium 6.3
  CVE-2022-0940

  Stored XSS due to Unrestricted File Upload in star7th/showdoc

  Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 14, 2022
• Medium 6.3
  CVE-2022-0937

  Stored xss in showdoc through file upload in star7th/showdoc

  Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Mar 14, 2022
• Medium 6.7
  CVE-2022-0362

  SQL Injection in star7th/showdoc

  SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Jan 26, 2022
• Medium 6.5
  CVE-2021-4172

  Cross-site Scripting (XSS) - Stored in star7th/showdoc

  Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.

  star7th star7th/showdoc showdoc/showdoc Packagist
  Jan 22, 2022
• Medium 5.3
  CVE-2022-0079

  Generation of Error Message Containing Sensitive Information in star7th/showdoc

  showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

  star7th star7th/showdoc showdoc/showdoc Packagist
  Jan 3, 2022
• Medium 6.3
  CVE-2021-4168

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 26, 2021
• Medium 6.5
  CVE-2021-4000

  Open Redirect in star7th/showdoc

  showdoc is vulnerable to URL Redirection to Untrusted Site

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 3, 2021
• Medium 6.5
  CVE-2021-3989

  Open Redirect in star7th/showdoc

  showdoc is vulnerable to URL Redirection to Untrusted Site

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 6.5
  CVE-2021-3990

  Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

  showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 4.3
  CVE-2021-3993

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Dec 1, 2021
• Medium 5.4
  CVE-2021-3683

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Nov 13, 2021
• Medium 4.3
  CVE-2021-3775

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Nov 13, 2021
• Medium 4.3
  CVE-2021-3776

  Cross-Site Request Forgery (CSRF) in star7th/showdoc

  showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  star7th star7th/showdoc showdoc/showdoc Packagist
  Nov 13, 2021
• Medium 5.3
  CVE-2021-3680

  Missing Cryptographic Step in star7th/showdoc

  showdoc is vulnerable to Missing Cryptographic Step

  star7th star7th/showdoc showdoc/showdoc Packagist
  Aug 4, 2021