2 results (0.002 seconds)

CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0

Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code. • http://secunia.com/advisories/9985 http://www.kb.cert.org/vuls/id/989580 http://www.procheckup.com/security_info/vuln_pr0302.html https://exchange.xforce.ibmcloud.com/vulnerabilities/13397 •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands. • http://secunia.com/advisories/9985 http://www.kb.cert.org/vuls/id/368300 http://www.procheckup.com/security_info/vuln_pr0304.html http://www.securityfocus.com/bid/8800 https://exchange.xforce.ibmcloud.com/vulnerabilities/13401 •