308 matches found
CVE-2023-1278
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
CVE-2023-1278
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
CVE-2023-1278
CVE-2023-1278 affects IBOS up to 4.5.5, where the vulnerability resides in the file mobil/index.php. The issue arises from improper handling of the accesstoken parameter, enabling cross-site scripting (XSS) that can be triggered remotely. Some connected sources confirm this mapping and suggest te...
CVE-2023-1278 IBOS index.php cross site scripting
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
CVE-2023-1278 IBOS index.php cross site scripting
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
CVE-2023-1278: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
IBOS 跨站脚本漏洞
IBOS is a collaborative office management system. A cross-site scripting vulnerability exists in IBOS version 4.5.5 and prior versions, which stems from incorrect manipulation of the parameter acesstoken resulting in cross-site scripting...
PT-2023-16857 · Ibos · Ibos
Name of the Vulnerable Software and Affected Versions: IBOS versions up to 4.5.5 Description: A problematic issue has been found in IBOS, affecting some unknown functionality of the file mobil/index.php. The manipulation of the accesstoken argument leads to cross-site scripting. The attack can be...
IBOS Command Injection Vulnerability (CNVD-2021-46548)
IBOS is a collaborative office management system. A command injection vulnerability exists in IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. No detailed vulnerability details are available at this time...
IBOS Command Injection Vulnerability
IBOS is a collaborative office management system. A command injection vulnerability exists in ibos IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. An attacker can exploit this vulnerability to gain server control privileges...
CVE-2020-21785
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...
CVE-2020-21786
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...
CVE-2020-21783
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
CVE-2020-21783
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
CVE-2020-21785
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...
CVE-2020-21786
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...
Command injection
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...