Combodo iTop Code Execution Vulnerability

iTop also known as IT Operations Portal, IT Operations Portal is a French company Combodo based on ITIL development and used for the daily operation of the IT environment of open source Web applications. The tool provides incident management, configuration management and problem management and...

CVE-2013-0805

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

CVE-2013-0805

CVE-2013-0805 covers multiple cross-site scripting (XSS) flaws in the iTop (IT Operations Portal) search feature. The vulnerabilities allow remote attackers to inject arbitrary HTML/script via the text parameter to pages/UI.php or the expression parameter to pages/run_query.php. Affected versions...

CVE-2011-4275

CVE-2011-4275 affects iTop (IT Operations Portal) 1.1.181 and 1.2.0-RC-282, with multiple stored and reflected XSS vectors. The root cause is insufficient input sanitisation across numerous fields and parameters (e.g., company name, database server name, CSV import, copy‑paste actions, auth_user ...