532 matches found
Combodo iTop Information Disclosure Vulnerability (CNVD-2020-47569)
Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management functions. An information disclosure vulnerability exists in...
CVE-2020-12779
Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script...
CVE-2020-12777
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information...
CVE-2020-12780
A security misconfiguration exists in Combodo iTop, which can expose sensitive information...
CVE-2020-12777
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information...
CVE-2020-12778
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack...
CVE-2020-12779
Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script...
CVE-2020-12778
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack...
CVE-2020-12781
Combodo iTop contains a cross-site request forgery CSRF vulnerability, attackers can execute specific commands via malicious site request forgery...
CVE-2020-12780
A security misconfiguration exists in Combodo iTop, which can expose sensitive information...
Information disclosure
A security misconfiguration exists in Combodo iTop, which can expose sensitive information...
Design/Logic Flaw
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack...
Cross site request forgery (csrf)
Combodo iTop contains a cross-site request forgery CSRF vulnerability, attackers can execute specific commands via malicious site request forgery...
Cross site scripting
Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script...
Improper access control
A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information...
CVE-2020-12781
CVE-2020-12781 affects Combodo iTop and describes a cross-site request forgery (CSRF) vulnerability. The CVE entry notes that attackers can trigger commands via a malicious site request forgery, with NVD metrics indicating notable impact (CVSS v3.1: High, with Network exposure, no privileges requ...
CVE-2020-12781 Combodo iTop - CSRF
Combodo iTop contains a cross-site request forgery CSRF vulnerability, attackers can execute specific commands via malicious site request forgery...
CVE-2020-12780 Combodo iTop - Security Misconfiguration
A security misconfiguration exists in Combodo iTop, which can expose sensitive information...
CVE-2020-12780
CVE-2020-12780 stems from a security misconfiguration in Combodo iTop exposing sensitive information. Connected advisories describe related, concrete iTop flaws affecting multiple versions and modules: XSS in dashlets/dashboard editor (pre-3.0.4/3.1.1), full path disclosure in dashboard config, a...