Lucene search

K

Ovidentia Security Vulnerabilities

cve
cve

CVE-2018-1000619

Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload...

8.8CVSS

8.7AI Score

0.008EPSS

2022-10-03 04:21 PM
27
cve
cve

CVE-2022-22914

An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path...

7.5CVSS

7.4AI Score

0.002EPSS

2022-02-17 09:15 PM
92
cve
cve

CVE-2021-29343

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source...

5.4CVSS

5.9AI Score

0.001EPSS

2021-03-30 12:16 PM
17
cve
cve

CVE-2019-13977

index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=create, tg=site&item=4, tg=admdir&idx=mdb&id=1, tg=notes&idx=Create, tg=admfaqs&idx=Add, or...

5.4CVSS

5.1AI Score

0.001EPSS

2019-07-19 07:15 AM
50
cve
cve

CVE-2019-13978

Ovidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem...

8.8CVSS

9.1AI Score

0.001EPSS

2019-07-19 07:15 AM
64
cve
cve

CVE-2008-4423

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify...

8.3AI Score

0.003EPSS

2008-10-03 10:22 PM
24
cve
cve

CVE-2008-3917

Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter in a search...

5.7AI Score

0.003EPSS

2008-09-04 06:41 PM
22
cve
cve

CVE-2008-3918

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

8AI Score

0.001EPSS

2008-09-04 06:41 PM
21