LogicalDOC Blind SQL Injection Vulnerability in Logout Functionality

A blind SQL injection vulnerability has been identified in the logout functionality of LogicalDOC, a document management system. This vulnerability can be exploited by unauthenticated attackers using a time-based blind SQL injection technique, potentially leading to the disclosure of all database contents. Depending on the presence of certain entries in specific database tables, this vulnerability could also result in account takeover.

Impact

Exploitation of this vulnerability allows for the disclosure of all database contents. Additionally, account takeover is a potential outcome, depending on the presence of entries in certain database tables.