308 matches found
CVE-2020-21785
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...
CVE-2020-21785
CVE-2020-21785 affects IBOS 4.5.4 Open, with a Command Injection vulnerability in the database backup component. The available connected records consistently describe the issue as a vulnerability in the backup process, but do not provide concrete exploit details, affected subcomponents beyond “da...
CVE-2020-21786
CVE-2020-21786 affects IBOS 4.5.4 Open. The Arbitrary File Inclusion vulnerability allows getshell via /system/modules/dashboard/controllers/CronController.php. NVD records a base score of 7.5 (HIGH) under CVSS2 and 9.8 (CRITICAL) under CVSS3.1, indicating remote access with no authentication and...
CVE-2020-21786
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...
CVE-2020-21783
CVE-2020-21783 refers to an XSS vulnerability in IBOS 4.5.4 where the issue is in the emailbody[content] parameter. Publicly documented impact supports cross-site scripting with user interaction likely required per CVSS3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). NVD lists base scores of 4.3...
CVE-2020-21783
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
CVE-2020-21786: Unrestricted Upload of File with Dangerous Type
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...
IBOS命令注入漏洞
IBOS is a collaborative office management system. A command injection vulnerability exists in IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. No detailed vulnerability details are available at this time...
CVE-2020-21785: Improper Neutralization of Special Elements used in a Command
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...
CVE-2020-21783: Improper Neutralization of Input During Web Page Generation
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
IBOS Enterprise Collaboration Management Software Business Edition Has XSS Vulnerabilities
IBOS Enterprise Collaboration Management Software is an open source office OA system developed by Shenzhen BOS Xiechuang Network Technology Co. IBOS enterprise collaborative management software commercial version of the XSS vulnerability, attackers can use the vulnerability to obtain user cookie...
Command Execution Vulnerability in IBOS Enterprise Collaboration Management Software Backend
IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A command execution vulnerability exists in the backend of IBOS Enterprise Collaboration Management Software, which can be exploited by a remote attacker to submit a special request, execute...
ibos-haarstudio.de Cross Site Scripting vulnerability OBB-1433326
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL Injection Vulnerability in IBOS Office (CNVD-2020-41794)
IBOS is a collaborative office management system based on PHP development. The IBOS office system suffers from an SQL injection vulnerability, which can be exploited by attackers to gain access to sensitive database information...
SQL Injection Vulnerability in IBOS Office (CNVD-2020-41793)
IBOS is a collaborative office management system based on PHP development. The IBOS office system suffers from an SQL injection vulnerability, which can be exploited by attackers to gain access to sensitive database information...
SQL Injection Vulnerability in IBOS-Office Portal
IBOS-Office Portal is an open source office OA system developed by Shenzhen BOS Xiechuang Network Technology Co. IBOS-Office Portal has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Command Execution Vulnerability in IBOS Enterprise Collaboration Software Version 4.5.4
IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A command execution vulnerability exists in IBOS Enterprise Collaboration Management Software version 4.5.4. Allows an attacker to remotely execute commands and gain server privileges...
IBOS Cross-Site Scripting Vulnerability
IBOS Internet Business Openration System is a set of open-source enterprise collaborative office management platform of China's Bosch Xiechuang Network Technology Company. The platform has dynamic rules configuration and execution , process control , dynamic script execution and transaction...
