Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allow (1) remote authenticated users with access to the LogManagement functionality to read arbitrary files via a .. (dot dot) in the logname parameter to out/out.LogManagement.php or (2) remote attackers to write to arbitrary files via a .. (dot dot) in the fileId parameter to op/op.AddFile2.php. NOTE: vector 2 can be leveraged to execute arbitrary code by using CVE-2014-2278.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SeedDMS ‘out.LogManagement.php’目录遍历漏洞
Vulnerability Description
SeedDMS（前称LetoDMS和MyDMS）是SeedDMS爱好者共同开发的一套基于PHP和MySql的开源文档管理系统。该系统主要用于存储和共享文档。 SeedDMS 4.3.4之前版本中存在目录遍历漏洞。远程攻击者可借助out/out.LogManagement.php脚本的‘logname’参数中的资源遍历字符‘..’利用该漏洞以‘LogManagement功能’访问权限读取任意文件；借助op/op.AddFile2.php脚本的‘fileId’参数中的资源遍历字符‘..’利用该漏洞写入任意文件
CVSS Information
N/A
Vulnerability Type
N/A