Skip to content
OpenAdvisories

Vendor

Owndms

1 known vulnerabilities.

Products

ownDMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2019-25580

    ownDMS 4.7 SQL Injection via pdfstream.php imagestream.php

    ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter. Attackers can send GET requests to pdfstream.php, imagestream.php, or anyfilestrea…

    Owndms ownDMS