TI-2022-19406 CVE-2022-40798 · GHSA-73hh-p4j2-j7gj
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control.
Priority HIGH 72
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control.
Ocomon Project
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Ocomon Project records in CISA KEVNo Ocomon Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Ocomon · all components
TI-2022-19858 CVE-2022-41391 · GHSA-p994-97w6-6qr3
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php.
Priority MEDIUM 51
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php.
TI-2022-19857 CVE-2022-41390 · GHSA-gcqr-34hj-8f3c
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php.
Priority MEDIUM 51
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php.
TI-2023-16581 CVE-2023-33559 · GHSA-hgjj-3x23-5xv2
A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1…
Priority MEDIUM 41
A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file.
TI-2023-16580 CVE-2023-33558 · GHSA-pxm4-75xf-9fq8
An information disclosure vulnerability in the component users-grid-data.php of Ocomon…
Priority MEDIUM 40
An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames.