OV
Vendor
Ovidentia
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-22914 | OV Ovidentia Ovidentia | 7.5 | Feb 17 | An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path… |
| CVE-2021-29343 | OV Ovidentia Ovidentia | 5.4 | Mar 30 | Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php |
| CVE-2019-13978 | OV Ovidentia Ovidentia | 8.8 | Jul 19 | Ovidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem request |
| CVE-2019-13977 | OV Ovidentia Ovidentia | 5.4 | Jul 19 | index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=create, tg=site&item=4, tg=admdir&idx=mdb&id=1,… |
| CVE-2018-1000619 | OV Ovidentia Ovidentia | 8.8 | Jul 9 | Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePathfromTg that can result in Authenticated Remote Code… |
| CVE-2008-4423 | OV Ovidentia Ovidentia | – | Oct 3 | SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action |
| CVE-2008-3917 | OV Ovidentia Ovidentia | – | Sep 4 | Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter in a search action |
| CVE-2008-3918 | OV Ovidentia Ovidentia | – | Sep 4 | SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the field parameter in a search action |