CVE-2023-1742

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-1742

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

Sql injection

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-1742 IBOS Report Search getlist sql injection

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2023-1742

CVE-2023-1742 affects IBOS 4.5.5. The vulnerability targets the file endpoint /?r=report/api/getlist in the Report Search component, where manipulation leads to SQL injection. Exploitation may be remote and multiple sources note the exploit has been disclosed publicly. Impact is described as SQL ...

PT-2023-17212 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS versions up to 4.5.4 Description: A critical vulnerability has been found in an unknown functionality of the file /?r=email/api/mark&op=delFromSend. The manipulation of the emailids argument leads to sql injection. The attack can be...

PT-2023-17207 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.5 Description: A critical issue affects some unknown functionality of the file "/?r=report/api/getlist" of the component Report Search, leading to sql injection. The attack may be launched remotely. Recommendations: For IBOS...

PT-2023-17209 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.5 Description: A critical issue was found in the htaccess Handler component, allowing for unrestricted upload. This can be initiated remotely. The issue has been publicly disclosed and may be exploited. Recommendations: For...

IBOS SQL注入漏洞

IBOS is a collaborative office management system. A security vulnerability exists in IBOS version 4.5.5. An attacker can exploit the vulnerability to perform a sql injection attack...

CVE-2023-1742: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

IBOS SQL注入漏洞

IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS 4.5.4 and earlier versions, which stems from a problem with the file /?r=email/api/mark&op=delFromSend, where manipulation of the parameter emailids can lead to sql injection...

CVE-2023-1744: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component htaccess Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2023-1747: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in IBOS up to 4.5.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=email/api/mark&op=delFromSend. The manipulation of the argument emailids leads to sql injection. The attack can be launched remotely. The explo...

CVE-2023-1494

A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1494

A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

Sql injection

A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1494

CVE-2023-1494 affects IBOS 4.5.5; the vulnerability is in an unknown function of ApiController.php where manipulating the emailids parameter leads to SQL injection. The issue is exploitable remotely and has been disclosed publicly. Public sources consistently describe a SQL injection with potenti...

CVE-2023-1494 IBOS ApiController.php sql injection

A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1494 IBOS ApiController.php sql injection

A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-1494: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...