Vulnerabilities (CVE)

Filtered by vendor Hummingbird Subscribe
Filtered by product Cyberdocs
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1103 1 Hummingbird 1 Cyberdocs 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.
CVE-2003-1102 1 Hummingbird 1 Cyberdocs 2023-12-10 5.0 MEDIUM N/A
Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code.
CVE-2003-1101 1 Hummingbird 1 Cyberdocs 2023-12-10 5.0 MEDIUM N/A
Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message.
CVE-2003-1100 1 Hummingbird 1 Cyberdocs 2023-12-10 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors.