Agora-Project

8 CVEs across 1 Agora-Project products. Browse Agora-Project vulnerabilities, severities, and proof-of-concept exploits.

Agora-Project products with known CVEs

ProductCVEs
Agora-Project8
Agora-Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67079Critical9.82026-01-15File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted…
CVE-2025-67078Medium6.12026-01-15Cross site scripting (XSS) vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute arbitrary code via the notify parameter of the f…
CVE-2025-67077High8.82026-01-15File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile a…
CVE-2025-67076High7.52026-01-15Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controlle…
CVE-2017-6562Medium6.12017-03-09XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack.
CVE-2017-6561Medium6.12017-03-09XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack.
CVE-2017-6560Medium6.12017-03-09XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.
CVE-2017-6559Medium6.12017-03-09XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.