PatchTheCVE: docmanhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2007-0380: DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectorshttps://patchthecve.com/cve/CVE-2007-0380.htmlhttps://patchthecve.com/cve/CVE-2007-0380.htmlTue, 16 Jun 2026 22:35:27 +0000MEDIUM 5.0: DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors.CVE-2007-0379: Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web scrhttps://patchthecve.com/cve/CVE-2007-0379.htmlhttps://patchthecve.com/cve/CVE-2007-0379.htmlTue, 16 Jun 2026 22:35:27 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2007-0378: Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands viahttps://patchthecve.com/cve/CVE-2007-0378.htmlhttps://patchthecve.com/cve/CVE-2007-0378.htmlTue, 16 Jun 2026 22:35:27 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors.