Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2014-10-17	CVE-2014-2278	Improper Input Validation vulnerability in Seeddms Unrestricted file upload vulnerability in op/op.AddFile2.php in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the partitionIndex parameter and leveraging CVE-2014-2279.2 to access it via the directory specified by the fileId parameter. network high complexity seeddms CWE-20	5.1
2014-03-20	CVE-2014-2280	Cross-Site Scripting vulnerability in Seeddms Cross-site scripting (XSS) vulnerability in the search feature in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter. network seeddms CWE-79	4.3