Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2011-3645

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.

  • Published: Sep 27, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-3645
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
newgensoft / omnidocs - -