Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

star7th — Vulnerabilities & Security Advisories 36

Browse all 36 CVE security advisories affecting star7th. AI-powered Chinese analysis, POCs, and references for each vulnerability.

star7th operates primarily as a provider of enterprise resource planning and customer relationship management software solutions, targeting mid-sized businesses with integrated administrative tools. Security audits have identified approximately 35 Common Vulnerabilities and Exposures associated with their platforms, predominantly involving SQL injection and cross-site scripting flaws. These vulnerabilities frequently stem from insufficient input validation in web interfaces, allowing attackers to manipulate database queries or inject malicious scripts. While remote code execution incidents are less frequent, privilege escalation risks remain a concern due to improper access control mechanisms in certain modules. No major public data breaches have been widely reported, though the consistent presence of these CVEs suggests ongoing challenges in securing legacy codebases. Organizations utilizing star7th products should prioritize regular patching and implement strict input sanitization protocols to mitigate these known attack vectors effectively.

Top products by star7th: star7th/showdoc ShowDoc
CVE ID Title CVSS Severity Published
CVE-2026-86644 star7th showdoc API Page Save Endpoint editormd.js cross site scripting — showdoc CWE-79 3.5 Low 2026-09-08
CVE-2026-6982 star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection — ShowDoc CWE-89 6.3 Medium 2026-04-25
CVE-2022-1034 There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc — star7th/showdoc CWE-434 7.2 - 2022-03-22
CVE-2022-0964 Stored XSS viva .webmv file upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0965 Stored XSS viva .ofd file upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0966 Stored XSS via File Upload in star7th/showdoc in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0967 Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0942 Stored XSS due to Unrestricted File Upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0957 Stored XSS via File Upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0956 Stored XSS via File Upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-15
CVE-2022-0951 File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc — star7th/showdoc CWE-434 5.4 - 2022-03-15
CVE-2022-0950 Unrestricted Upload of File with Dangerous Type in star7th/showdoc — star7th/showdoc CWE-434 8.7 - 2022-03-15
CVE-2022-0945 Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc — star7th/showdoc CWE-434 5.4 - 2022-03-15
CVE-2022-0962 Stored XSS viva .webma file upload in star7th/showdoc — star7th/showdoc CWE-434 5.4 - 2022-03-14
CVE-2022-0960 Stored XSS viva .properties file upload in star7th/showdoc — star7th/showdoc CWE-434 5.4 - 2022-03-14
CVE-2022-0946 Stored XSS viva cshtm file upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0941 Stored XSS due to Unrestricted File Upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0940 Stored XSS due to Unrestricted File Upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0938 Stored XSS via file upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0937 Stored xss in showdoc through file upload in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-14
CVE-2022-0880 Cross-site Scripting (XSS) - Stored in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-03-12
CVE-2022-0409 Unrestricted Upload of File with Dangerous Type in star7th/showdoc — star7th/showdoc CWE-434 8.0 - 2022-02-19
CVE-2022-0362 SQL Injection in star7th/showdoc — star7th/showdoc CWE-89 8.8 - 2022-01-26
CVE-2021-4172 Cross-site Scripting (XSS) - Stored in star7th/showdoc — star7th/showdoc CWE-79 5.4 - 2022-01-22
CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc — star7th/showdoc CWE-209 5.3 - 2022-01-03
CVE-2021-4168 Cross-Site Request Forgery (CSRF) in star7th/showdoc — star7th/showdoc CWE-352 6.5 - 2021-12-26
CVE-2021-4000 Open Redirect in star7th/showdoc — star7th/showdoc CWE-601 6.1 - 2021-12-03
CVE-2021-3989 Open Redirect in star7th/showdoc — star7th/showdoc CWE-601 6.1 - 2021-12-01
CVE-2021-3990 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc — star7th/showdoc CWE-338 5.3 - 2021-12-01
CVE-2021-3993 Cross-Site Request Forgery (CSRF) in star7th/showdoc — star7th/showdoc CWE-352 6.5 - 2021-12-01

This page lists every published CVE security advisory associated with star7th. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.