CVE-2023-1278 IBOS index.php cross site scripting

A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...

CVE-2023-1278

CVE-2023-1278 affects IBOS up to 4.5.5, where the vulnerability resides in the file mobil/index.php. The issue arises from improper handling of the accesstoken parameter, enabling cross-site scripting (XSS) that can be triggered remotely. Some connected sources confirm this mapping and suggest te...

IBOS 跨站脚本漏洞

IBOS is a collaborative office management system. A cross-site scripting vulnerability exists in IBOS version 4.5.5 and prior versions, which stems from incorrect manipulation of the parameter acesstoken resulting in cross-site scripting...

PT-2023-16857 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS versions up to 4.5.5 Description: A problematic issue has been found in IBOS, affecting some unknown functionality of the file mobil/index.php. The manipulation of the accesstoken argument leads to cross-site scripting. The attack can be...

IBOS Command Injection Vulnerability (CNVD-2021-46548)

IBOS is a collaborative office management system. A command injection vulnerability exists in IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. No detailed vulnerability details are available at this time...

IBOS Command Injection Vulnerability

IBOS is a collaborative office management system. A command injection vulnerability exists in ibos IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. An attacker can exploit this vulnerability to gain server control privileges...

CVE-2020-21786

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...

CVE-2020-21785

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

CVE-2020-21783

In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...

CVE-2020-21783

In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...

CVE-2020-21785

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

CVE-2020-21786

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...

Command injection

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

Design/Logic Flaw

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...

Cross site scripting

In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...

CVE-2020-21785

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...

CVE-2020-21785

CVE-2020-21785 affects IBOS 4.5.4 Open, with a Command Injection vulnerability in the database backup component. The available connected records consistently describe the issue as a vulnerability in the backup process, but do not provide concrete exploit details, affected subcomponents beyond “da...

CVE-2020-21786

CVE-2020-21786 affects IBOS 4.5.4 Open. The Arbitrary File Inclusion vulnerability allows getshell via /system/modules/dashboard/controllers/CronController.php. NVD records a base score of 7.5 (HIGH) under CVSS2 and 9.8 (CRITICAL) under CVSS3.1, indicating remote access with no authentication and...

CVE-2020-21786

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...

CVE-2020-21783

CVE-2020-21783 refers to an XSS vulnerability in IBOS 4.5.4 where the issue is in the emailbody[content] parameter. Publicly documented impact supports cross-site scripting with user interaction likely required per CVSS3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). NVD lists base scores of 4.3...