EUVD-2021-15979

Malware in sbrugna...

EUVD-2022-28047

Malicious code in bioql PyPI...

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

CVE-2021-29343

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

Path traversal

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

CVE-2022-22914

CVE-2022-22914 affects Ovidentia CMS 6.0 FileManager. The issue is an incorrect access control that permits an authenticated attacker to view and download files in the upload directory via path traversal. Underlying cause: insufficient restriction on file paths in FileManager. Impact: exposure of...

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

PT-2022-15732

Name of the Vulnerable Software and Affected Versions Ovidentia CMS version 6.0 Description An issue with access control in the FileManager component allows authenticated attackers to view and download content in the upload directory via path traversal. Recommendations For Ovidentia CMS version...

CVE-2022-22914: Improper Limitation of a Pathname to a Restricted Directory

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal...

Ovidentia CMS SQL Injection Vulnerability

Ovidentia is an open source content management system and multi-user collaboration platform . It is written in PHP , and uses MYSQL as its database . It can be simple and easy to integrate a content can be published on the WEB environment or a portal component of the company , organization ,...

CVE-2021-29343

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...

CVE-2021-29343

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...

Sql injection

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...

CVE-2021-29343

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...

CVE-2021-29343

Ovidentia CMS 6.x contains a SQL injection in the id parameter of index.php. The vulnerability can cause the checkbox attribute to be converted to text and displayed in the text region or source code. Public references (e.g., Exploit-DB) confirm exploitation data, and CVE details provide the metr...

PT-2021-18175

Name of the Vulnerable Software and Affected Versions: Ovidentia CMS versions 6.x Description: The issue concerns a SQL injection vulnerability. Specifically, it affects the id parameter of the "index.php" endpoint. An attacker can extract and display the checkbox property from text data in eithe...

CVE-2021-29343: Improper Neutralization of Special Elements used in an SQL Command

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code...

Ovidentia 8.4.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------- Exploit Title: Ovidentia CMS - SQL Injection Authenticated CVE: CVE-2019-13978 Exploit Author: Fernando Pinheiro n3k00n3 Victor Flores UserX Vendor Homepage: https://www.ovidentia.org/...