Product by Omnispace

    Agora Project

    21 known vulnerabilities in Agora Project (Omnispace), 0 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Agora Project (Omnispace)
    CriticalCVE-2026-63146

    Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php

    		9.8
    HighCVE-2026-63162

    Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter

    		8.8
    CriticalCVE-2026-63158

    Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies

    		7.4
    HighCVE-2026-63154

    Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]

    		8.8
    CriticalCVE-2026-63149

    Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()

    		7.4
    HighCVE-2026-63161

    Omnispace Agora Project < 26.10.0 Session Fixation via Authentication

    		8.8
    CriticalCVE-2026-63159

    Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover

    		7.4
    CriticalCVE-2026-63160

    Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage

    		7.4
    HighCVE-2026-63163

    Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload

    		7.5
    HighCVE-2026-63165

    Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter

    		8.1
    HighCVE-2026-63152

    Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter

    		8.1
    HighCVE-2026-63153

    Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()

    		8.1
    HighCVE-2026-63174

    Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList

    		8.1
    HighCVE-2026-63172

    Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit

    		7.1
    MediumCVE-2026-63169

    Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe

    		6.4
    MediumCVE-2026-63156

    Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter

    		6.1
    MediumCVE-2026-63168

    Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass

    		5.4
    MediumCVE-2026-63171

    Omnispace Agora Project < 26.10.0 Stored XSS via Category Description

    		5.4
    MediumCVE-2026-63157

    Omnispace Agora Project < 26.10.0 Stored XSS via Links Module

    		5.4
    MediumCVE-2026-63147

    Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name

    		5.4
    MediumCVE-2026-63148

    Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename

    		5.4

    All products by Omnispace