Skip to content
Opendocman vulnerabilities
Newest
-
opendocman
OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text Extraction
CVE-2026-108750
5.3 Medium
-
opendocman
OpenDocMan 1.3.4 SQL Injection via where Parameter
CVE-2019-25684
8.8 High
-
opendocman
An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via...
CVE-2021-45834
9.8 Critical
-
opendocman
OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote...
CVE-2014-1946
8.8 High
-
opendocman
Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to...
CVE-2015-5625
EPSS 22.8%
4.3 Medium
-
opendocman
Cross-site scripting (XSS) vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows...
CVE-2014-4853
4.3 Medium
-
opendocman
SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers...
CVE-2014-2317
Public exploit
6.8 Medium
-
opendocman
SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers...
CVE-2014-1945
Public exploit
7.5 High
-
opendocman
OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a...
CVE-2011-3764
5.0 Medium
-
opendocman
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute...
CVE-2009-3801
7.5 High
-
opendocman
Multiple cross-site scripting (XSS) vulnerabilities in OpenDocMan 1.2.5 allow remote attackers to...
CVE-2009-3789
Public exploit
4.3 Medium
-
opendocman
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute...
CVE-2009-3788
7.5 High
-
opendocman
Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers...
CVE-2008-2788
4.3 Medium
-
opendocman
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers...
CVE-2008-2787
Public exploit
4.3 Medium
-
opendocman
SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute...
CVE-2006-5655
7.5 High