Letodms Project Letodms — known CVE vulnerabilities

Every CVE whose affected-product data names Letodms Project Letodms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2012-4570 — CVSS 9.8 (critical): SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to…
• CVE-2012-4568 — CVSS 8.8 (high): Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the…
• CVE-2012-4567 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web…
• CVE-2012-4569 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers…