Skip to content
OpenAdvisories

Vendor

Omnispace

21 known vulnerabilities.

Products

Agora Project 21
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-63146

    Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php

    Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile() and DbInstall::dbControl(), …

    Omnispace Agora Project