Resourcespace
Approved changes feed: RSS · Atom
cpe:2.3:a:montala:resourcespace:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Montala (1c532a0f-a8cf-5096-bcbb-89f13d719507) |
|---|---|
| Product | Resourcespace (ac9543ec-532c-56ba-ac94-e385635849eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fabn/resourcespace |
purl2cpe | 2026-06-01 10:16:27.627985 |
pkg:github/ivorypenguin/resourcespace |
purl2cpe | 2026-06-01 10:16:27.627988 |
pkg:rpm/opensuse/resourcespace |
purl2cpe | 2026-06-01 10:16:27.627991 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-31260 |
vulnerable | 2026-06-08 05:43:40.668741 |
Details available
In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.
Published: 2022-07-17T19:57:00.000Z
Updated: 2024-08-03T07:11:39.898Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41951 |
vulnerable | 2026-06-08 05:35:21.253675 |
Details available
ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the wordpress_user parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the context of the victim's browser.
Published: 2021-11-15T15:27:22.000Z
Updated: 2024-08-04T03:22:25.759Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25662 |
vulnerable | 2026-06-08 05:13:42.734074 |
ResourceSpace 8.6 SQL Injection via watched_searches.php
HIGH (8.2)
ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' parameter. Attackers can send GET requests to the watched_searches.php endpoint with crafted SQL payloads to extract sensitive database information including usernames and credentials.
Published: 2026-04-05T20:45:16.812Z
Updated: 2026-04-06T18:49:15.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6915 |
vulnerable | 2026-06-08 05:06:59.858077 |
Details available
SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute arbitrary SQL commands via the "user" cookie to plugins/feedback/pages/feedback.php.
Published: 2015-09-11T16:00:00.000Z
Updated: 2024-09-17T00:51:29.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3648 |
vulnerable | 2026-06-08 05:06:38.499023 |
Details available
Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2.6727 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the defaultlanguage parameter.
Published: 2015-06-09T14:00:00.000Z
Updated: 2024-08-06T05:47:57.822Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4311 |
vulnerable | 2026-06-08 04:59:30.124666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.