Filtered by vendor Code-projects Subscriptions
Filtered by product Document Management System Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-56289 1 Code-projects 1 Document Management System 2025-09-17 5.4 Medium
code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files.
CVE-2025-8171 2 Code-projects, Fabian 2 Document Management System, Document Management System 2025-08-05 6.3 Medium
A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0. This issue affects some unknown processing of the file /insert.php. The manipulation of the argument uploaded_file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-8433 2 Code-projects, Fabian 2 Document Management System, Document Management System 2025-08-05 5.4 Medium
A vulnerability was found in code-projects Document Management System 1.0 and classified as critical. This issue affects the function unlink of the file /dell.php. The manipulation of the argument ID leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.