Montala Resourcespace vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Montala Resourcespace: 2 record(s), with affected versions and fixes.cpe:2.3:a:montala:resourcespace
CVE-2019-25693
High · 7.1
CWE-89 Apr 12, 2026
ResourceSpace 8.6 SQL Injection via collection_edit.php
ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keywords parameter in collection_edit.php. Attackers can submit POST requests with crafted SQL payloads in the keywords field to extract sensitive database information including schema names, user credentials, and other confidential data.
CVE-2019-25662
High · 7.5
CWE-89 Apr 5, 2026
ResourceSpace 8.6 SQL Injection via watched_searches.php
ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' parameter. Attackers can send GET requests to the watched_searches.php endpoint with crafted SQL payloads to extract sensitive database information including usernames and credentials.