Skip to content
OpenAdvisories

Product · star7th

showdoc

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2026-119661

    ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries

    ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that checks edit permission only for the first supplied entry id. Authenticated attackers can place their own entry id first and append other u…

    star7th showdoc
  • Medium 6.3
    CVE-2026-6982

    star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection

    A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a…

    star7th showdoc showdoc/showdoc Packagist