Montala

9 CVEs across 1 Montala products. Browse Montala vulnerabilities, severities, and proof-of-concept exploits.

Montala products with known CVEs

ProductCVEs
Resourcespace9
Montala CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25693High7.12026-04-12ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code thro…
CVE-2019-25662High8.22026-04-05ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th…
CVE-2022-31260Medium6.52022-07-17In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.
CVE-2021-41951Medium6.12021-11-15ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the wordpress_use…
CVE-2021-41950Critical9.12021-11-15A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace se…
CVE-2021-41765Critical9.82021-11-15A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 < rev 18274 allows remote unauthenticated attackers to execute a…
CVE-2015-69152015-09-11SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute arbitrary SQL commands via the "user" cook…
CVE-2015-36482015-06-09Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and execute arbitrary…
CVE-2011-43112011-11-19ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified ve…