Owndms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Owndms records in CISA KEV

No Owndms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Owndms 1 record HIGH Ownticket 1 record MEDIUM

Records

2 records

TI-2019-15633 CVE-2019-25580 · GHSA-5jvc-6gmm-9m79

ownDMS 4.7 SQL Injection via pdfstream.php imagestream.php

HIGH 77

ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00337 Published 2026-03-21 No fix listed CWE-434

TI-2018-13102 CVE-2018-18527 · GHSA-g5qh-86cv-whc3

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.

MEDIUM 45

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01587 Published 2018-10-19 No fix listed CWE-89

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0