CVE-2018-1000619

Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, babgetAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons...

CVE-2018-1000619

Affected: Ovidentia 8.4.3 and earlier. Vulnerability: Unsanitized user input in utilit.php (bab_getAddonFilePathfromTg) can lead to Authenticated Remote Code Execution. Requires attacker to have permission to upload addons. CVSS metrics: v2 base 6.5 (MEDIUM); v3 base 8.8 (HIGH). No explicit remed...