Approved changes feed: RSS · Atom
cpe:2.3:a:r-soft_serwis:dms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | R Soft Serwis (69123e6e-3761-5e6b-be02-90d36ee96096) |
|---|---|
| Product | Dms (d77be39f-fdcf-586f-a1bb-af4590dac14e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-41880 |
vulnerable | 2026-07-29 00:49:31.513887 |
OS Command Injection in R-SOFT DMS
R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module. Multiple command execution functions accept user-controllable file paths without proper sanitization before passing them to the system shell via SSH. In current infrastructure the URL encoding neutralizes the injection during the standard web upload flow. An authenticated attacker who is able to trigger the OCR functionality for the uploaded file can execute OS commands within the context of a root user.
This issue was fixed in version v3.19-2862 and v3.17-2580.
Published: 2026-07-10T09:05:10.683Z
Updated: 2026-07-10T10:55:59.746Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41879 |
vulnerable | 2026-07-29 00:49:31.513628 |
Weak password hashing in R-SOFT DMS
R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file.
This issue was fixed in version v3.17-2000.
Published: 2026-07-10T09:05:47.551Z
Updated: 2026-07-10T10:19:29.636Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41878 |
vulnerable | 2026-07-29 00:49:31.513353 |
Insecure Direct Object Reference in R-SOFT DMS
R-SOFT DMS is vulnerable to Insecure Direct Object Reference (IDOR) attack in multiple file download endpoints. The application fetches files from the database by ID and serves them to whoever requests them, relying only on session authentication, meaning any valid user can access any file.
This issue was fixed in version v3.19-2862 and v3.17-2580.
Published: 2026-07-10T09:05:31.988Z
Updated: 2026-07-10T10:23:43.264Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41877 |
vulnerable | 2026-07-29 00:49:31.512931 |
Stored XSS in R-SOFT DMS
R-SOFT DMS is vulnerable to Stored XSS in file upload functionality. Authenticated attacker can inject arbitrary HTML and JS into the name of the file being uploaded, which will be executed when visiting file list or upload status by other users.
This issue was fixed in version v3.19-2832 and v3.17-2580.
Published: 2026-07-10T09:05:07.927Z
Updated: 2026-07-10T10:56:50.110Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41876 |
vulnerable | 2026-07-29 00:49:31.512386 |
OS Command Injection in R-SOFT DMS
R-SOFT DMS is vulnerable to OS Command Injection in konwertujAction() function. The document converter executes shell commands using unsanitized file paths and format parameters. This allows an authenticated attacker to execute arbitrary system commands with the privileges of the web server user.
This issue was fixed in version v3.19-2752 and v3.17-2580.
Published: 2026-07-10T09:05:07.027Z
Updated: 2026-07-10T10:57:21.972Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.