Vulnerability CVE-2023-47261
Published: 2023-12-14

Description:
Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request contains a connection string for privileged SQL Server database access, and xp_cmdshell can be enabled.

 References:
https://www.dokmee.com/Support-Learn/Updates-Change-Log
https://h3x0s3.github.io/CVE2023~47261/
Copyright 2026, cxsecurity.com

 

Back to Top