Showing 1 vulnerability on this page for ShowDoc

Signals CISA KEV Ransomware Nuclei
ShowDoc vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.

CWE-434Apr 29, 2025
CVSS9.4v4.0EPSS1.04%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX