Lucene search
+L

5 matches found

CNVD
CNVD
•added 2020/02/24 12:00 a.m.•13 views

Combodo iTop Code Execution Vulnerability

iTop also known as IT Operations Portal, IT Operations Portal is a French company Combodo based on ITIL development and used for the daily operation of the IT environment of open source Web applications. The tool provides incident management, configuration management and problem management and...

8.1CVSS7.6AI score0.01167EPSS
SaveExploits0References1
NVD
NVD
•added 2014/03/20 4:55 p.m.•24 views

CVE-2013-0805

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

4.3CVSS5.8AI score0.01661EPSS
SaveExploits0References7
Prion
Prion
•added 2014/03/20 4:55 p.m.•18 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

4.3CVSS6.1AI score0.01661EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2014/03/20 4:00 p.m.•59 views

CVE-2013-0805

CVE-2013-0805 covers multiple cross-site scripting (XSS) flaws in the iTop (IT Operations Portal) search feature. The vulnerabilities allow remote attackers to inject arbitrary HTML/script via the text parameter to pages/UI.php or the expression parameter to pages/run_query.php. Affected versions...

4.3CVSS5.9AI score0.01661EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2011/11/26 2:00 a.m.•92 views

CVE-2011-4275

The iTop (IT Operations Portal) service management tool, versions 1.1.181 and 1.2.0-RC-282 , is vulnerable to multiple cross-site scripting (XSS) flaws. These vulnerabilities arise from improper input sanitization, allowing remote attackers to inject arbitrary web scripts or HTML. Specifically, t...

4.3CVSS5.7AI score0.01491EPSS
SaveIn wildExploits8References3Affected Software1
Rows per page
Query Builder