Owndms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Owndms records in CISA KEV

No Owndms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Owndms 1 record HIGH Ownticket 1 record MEDIUM

Records

1 record in Owndms · all components

TI-2019-15633 CVE-2019-25580 · GHSA-5jvc-6gmm-9m79

ownDMS 4.7 SQL Injection via pdfstream.php imagestream.php

HIGH 77

ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00337 Published 2026-03-21 No fix listed CWE-434

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0