KE
Product
Kordil Edms
by Kordil Edms Project · last CVE Jun 22, 2020
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add Kordil Edms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-13887
8.8
2%
Jun 22
documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder
Affected: before 2.2.60; 2.2.60
CVE-2020-13888
5.4
1%
Jun 22
Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php
Affected: before 2.2.60; 2.2.60
Showing 2