CVE-2021-45834

An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution.

• CWE-434

• https://github.com/opendocman/opendocmanProduct, Third Party Advisory
• https://github.com/opendocman/opendocman/issues/326Issue Tracking, Third Party Advisory
• https://github.com/opendocman/opendocman/issues/330Exploit, Issue Tracking, Third Party Advisory
• https://github.com/opendocman/opendocmanProduct, Third Party Advisory
• https://github.com/opendocman/opendocman/issues/326Issue Tracking, Third Party Advisory
• https://github.com/opendocman/opendocman/issues/330Exploit, Issue Tracking, Third Party Advisory

Published

Mar 18, 2022

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45822A cross-site scripting vulnerability is present in Xbtit 3.1…6.1
• CVE-2021-45829HDF5 1.13.1-1 is affected by: segmentation fault, which caus…5.5
• CVE-2021-45830A heap-based buffer overflow vulnerability exists in HDF5 1.…5.5
• CVE-2021-45831A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.…5.5
• CVE-2021-45832A Stack-based Buffer Overflow Vulnerability exists in HDF5 1…5.5
• CVE-2021-45833A Stack-based Buffer Overflow Vulnerability exists in HDF5 1…5.5
• CVE-2021-45835The Online Admission System 1.0 allows an unauthenticated at…9.8
• CVE-2021-45836An authenticated attacker can execute arbitrary commands as …8.8
• CVE-2021-45837It is possible to execute arbitrary commands as root in Terr…9.8
• CVE-2021-45839It is possible to obtain the first administrator's hash set …6.5
• CVE-2021-45840It is possible to execute arbitrary commands as root in Terr…9.8
• CVE-2021-45841In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517),…8.1