CVE-2025-52168

Incorrect access control in the dynawebservice component of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 allows unauthenticated attackers to access arbitrary files on the system...

CVE-2025-52162

The enterprise content management system Agorum core open versions v11.9.2 and v11.10.1 is vulnerable to an XML External Entity (XXE) injection. The flaw exists in the RSSReader endpoint due to improper handling of XML inputs, which may allow an attacker to access sensitive data by providing a cr...

agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications !-- Source: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2017-008.txt Advisory ID: SYSS-2017-008 Product: agorum core Pro Manufacturer: agorum Software GmbH Affected Versions: 7.8.1.4-251 Tested Versions: 7.8.1.4-251...