search
Ctrlk

Ovidentia

hashtag
Overview

Ovidentia is an open source CMS developed and maintained since 2001 by the French company CANTICO.

Ovidentia has a relatively low market share and is mostly used by French non-profit organizations and territorial communities and administrations.

hashtag
Default credentials

The default administrator credentials are:

[email protected]:012345678

hashtag
Administrator to RCE

Access the file upload configuration page and make sure that the web service has write rights on the currently configured upload folder:

/index.php?tg=site&idx=menu4&item=1

Then use the administration file manager page to create a folder on the application:

/php/index.php?tg=admfms

And configure the access rights on the folder to allows file upload and others permissions:

/php/index.php?tg=admfm&idx=rights&fid=<FOLDERID>

Upload file a web shell on the target:

/index.php?tg=fileman&idx=displayAddFileForm&id=<FOLDERID>&gr=Y&path=<FOLDERNAME>

The uploaded web shell can be accessed at the following URL:

PreviousJiraNextWordPress

Last updated