PatchTheCVEovidentia vulnerabilities and fixes
Recent CVEs affecting ovidentia, with upgrade or downgrade steps. 10 tracked.
ovidentia has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-02-17. Highest priority: CVE-2006-2811 (score 56/100).
- CVE-2022-22914 HIGH 7.5 DOWNGRADE An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attac
- CVE-2021-29343 MEDIUM 5.4 UPGRADE Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php
- CVE-2019-13978 HIGH 8.8 DOWNGRADE Ovidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem request.
- CVE-2019-13977 MEDIUM 5.4 DOWNGRADE index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=sit
- CVE-2018-1000619 HIGH 8.8 UPGRADE Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddo
- CVE-2008-4423 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL c
- CVE-2008-3918 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL c
- CVE-2008-3917 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arb
- CVE-2006-2811 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execut
- CVE-2005-1964 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute
FAQ
How do I fix ovidentia vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ovidentia being exploited right now?
None of the tracked ovidentia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ovidentia CVE should I patch first?
CVE-2006-2811 currently ranks highest (56/100): Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execut.