Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Hummingbird Subscribe
Filtered by product Cyberdocs
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1100 1 Hummingbird 1 Cyberdocs 2017-07-10 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors.
CVE-2003-1101 1 Hummingbird 1 Cyberdocs 2017-07-10 5.0 MEDIUM N/A
Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message.
CVE-2003-1102 1 Hummingbird 1 Cyberdocs 2017-07-10 5.0 MEDIUM N/A
Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code.
CVE-2003-1103 1 Hummingbird 1 Cyberdocs 2017-07-10 7.5 HIGH N/A
SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.