PatchTheCVE: letodmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2012-4385: letodms 3.3.6 has CSRF via change passwordhttps://patchthecve.com/cve/CVE-2012-4385.htmlhttps://patchthecve.com/cve/CVE-2012-4385.htmlTue, 16 Jun 2026 23:44:55 +0000MEDIUM 6.5: letodms 3.3.6 has CSRF via change passwordCVE-2012-4384: letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored Xhttps://patchthecve.com/cve/CVE-2012-4384.htmlhttps://patchthecve.com/cve/CVE-2012-4384.htmlTue, 16 Jun 2026 23:44:54 +0000MEDIUM 6.1: letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in CalendarCVE-2012-4570: SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allhttps://patchthecve.com/cve/CVE-2012-4570.htmlhttps://patchthecve.com/cve/CVE-2012-4570.htmlTue, 16 Jun 2026 23:45:25 +0000CRITICAL 9.8: SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2012-4569: Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3https://patchthecve.com/cve/CVE-2012-4569.htmlhttps://patchthecve.com/cve/CVE-2012-4569.htmlTue, 16 Jun 2026 23:45:25 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2012-4568: Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remohttps://patchthecve.com/cve/CVE-2012-4568.htmlhttps://patchthecve.com/cve/CVE-2012-4568.htmlTue, 16 Jun 2026 23:45:24 +0000HIGH 8.8: Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.CVE-2012-4567: Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attahttps://patchthecve.com/cve/CVE-2012-4567.htmlhttps://patchthecve.com/cve/CVE-2012-4567.htmlTue, 16 Jun 2026 23:45:24 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) inc/inc.ClassUI.php or (2) out/out.DocumentNotify.php.