Agora-Project
4 CVEs across 1 Agora-Project products. Browse Agora-Project vulnerabilities, severities, and proof-of-concept exploits.
Agora-Project products with known CVEs
Agora-Project CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-67079 | Critical | 9.8 | 2026-01-15 | File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted… |
CVE-2025-67078 | Medium | 6.1 | 2026-01-15 | Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute arbitrary code via the notify parameter of the f… |
CVE-2025-67077 | High | 8.8 | 2026-01-15 | File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile a… |
CVE-2025-67076 | High | 7.5 | 2026-01-15 | Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controlle… |
CVE-2017-6562 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. |
CVE-2017-6561 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. |
CVE-2017-6560 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. |
CVE-2017-6559 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. |