Kordil Edms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-13887 Jun 22, 16:15 HIGH This Week

documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP File Upload Kordil Edms

NVD

CVSS 3.1

8.8

EPSS

2.4%

CVE-2020-13888 Jun 22, 15:15 MEDIUM This Month

Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Kordil Edms

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2020-13887

EPSS 2% CVSS 8.8

HIGH This Week

PHP File Upload Kordil Edms

NVD

CVE-2020-13888

EPSS 1% CVSS 5.4

MEDIUM This Month

PHP XSS Kordil Edms

NVD