This software hasn't been updated since 2010.

Woody Hughes from Ingress Security discovered and reported multiple blind SQL injection vulnerabilities in Kordil EDMS in December 2012:
* http://www.ingresssecurity.com/download/i/mark_dl/u/4011297012/4583217802/INGRES-12052012-Kordil%20EDMS%20v2.2.60rc3%20SQL%20Injection%20Vulnerability.pdf
* www.exploit-db.com/exploits/23180

These issues haven't been patched.

To the best of my knowledge this file upload vulnerability (one of at least 5 in Kordil EDMS) has not been reported previously.