Vulnerabilities (CVE)

Filtered by vendor Ovidentia Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-29343 1 Ovidentia 1 Ovidentia 2021-04-05 5.5 MEDIUM 5.4 MEDIUM
Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code.
CVE-2019-13977 1 Ovidentia 1 Ovidentia 2019-07-27 3.5 LOW 5.4 MEDIUM
index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=create, tg=site&item=4, tg=admdir&idx=mdb&id=1, tg=notes&idx=Create, tg=admfaqs&idx=Add, or tg=admoc&idx=addoc&item=.