Omnidocs

DATE	CVE	VULNERABILITY TITLE	RISK
2011-09-27	CVE-2011-3645	Permissions, Privileges, and Access Controls vulnerability in Newgensoft Omnidocs Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user. network low complexity newgensoft CWE-264	7.5
2010-02-23	CVE-2010-0701	SQL Injection vulnerability in Newgensoft Omnidocs SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors. network low complexity newgensoft CWE-89	7.5