Montala Resourcespace vulnerabilities

• montala resourcespace ResourceSpace 8.6 SQL Injection via collection_edit.php CVE-2019-25693 7.1 HighApril 12, 2026
• montala resourcespace ResourceSpace 8.6 SQL Injection via watched_searches.php CVE-2019-25662 8.8 HighApril 5, 2026
• montala resourcespace In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows... CVE-2022-31260 Fix available 6.5 MediumJuly 17, 2022
• montala resourcespace A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote... CVE-2021-41950 EPSS 74.9% 9.1 CriticalNovember 15, 2021
• montala resourcespace A SQL injection issue in pages/edit_fields/9_ajax/add_keyword.php of ResourceSpace 9.5 and 9.6 <... CVE-2021-41765 EPSS 67.8% 9.8 CriticalNovember 15, 2021
• montala resourcespace ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability... CVE-2021-41951 Fix available EPSS 77.9% 6.1 MediumNovember 15, 2021
• montala resourcespace SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote... CVE-2015-6915 7.5 HighSeptember 11, 2015
• montala resourcespace Directory traversal vulnerability in pages/setup.php in Montala Limited ResourceSpace before 7.2... CVE-2015-3648 7.5 HighJune 9, 2015
• montala resourcespace ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote... CVE-2011-4311 5.0 MediumNovember 19, 2011