High severity8.8NVD Advisory· Published Jul 9, 2018· Updated Jun 17, 2026

CVE-2018-1000619

Description

Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons.

Affected products

Ovidentia/Ovidentiainferred3 versions
<=8.4.3+ 2 more
- (no CPE)range: <=8.4.3
- cpe:2.3:a:ovidentia:ovidentia:*:*:*:*:*:*:*:*range: <=8.4.3
- (no CPE)range: <=8.4.3

Patches

Vulnerability mechanics

References

drive.google.com/opennvdTechnical DescriptionThird Party Advisory
www.ovidentia.org/index.phpnvdVendor Advisory
www.ovidentia.org/modulesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000