Vulnerability · Published Mar 30, 2021 · Assigned by mitre

CVE-2021-29343

Medium 5.4

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities).

Severity (CVSS NVD)5.4Medium

Exploit odds (30 days)0.8%top 44.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ovidentia.org x_refsource_MISC
https://www.exploit-db.com/exploits/49707 x_refsource_MISC