PatchTheCVEocomon vulnerabilities and fixes
Recent CVEs affecting ocomon, with upgrade or downgrade steps. 5 tracked.
ocomon has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-10-26. Highest priority: CVE-2022-41391 (score 59/100).
- CVE-2023-33559 HIGH 8.8 UPGRADE A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execut
- CVE-2023-33558 HIGH 7.5 UPGRADE An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows at
- CVE-2022-41391 CRITICAL 9.8 DOWNGRADE OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php.
- CVE-2022-41390 CRITICAL 9.8 DOWNGRADE OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php.
- CVE-2022-40798 HIGH 7.5 UPGRADE OcoMon 4.0RC1 is vulnerable to Incorrect Access Control
FAQ
How do I fix ocomon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ocomon being exploited right now?
None of the tracked ocomon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ocomon CVE should I patch first?
CVE-2022-41391 currently ranks highest (59/100): OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php..