Ocomon Project vulnerabilities
We track 3 vulnerabilities in Ocomon Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2023.
3vulnerabilities
0critical
3high
0exploited
7.9average CVSS score
Latest Ocomon Project vulnerabilities
- 8.8 High severity
Ocomon: Inclusion of Functionality from Untrusted Control Sphere
A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file.
- 7.5 High severity
Ocomon: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames.
- 7.5 High severity
Ocomon: Improper Access Control
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.