CVE-2023-34443 Cross-site Scripting vulnerability in the run_query.php page in Combodo iTop

Combodo iTop is a simple, web based IT Service Management tool. When displaying page Run queries Cross-site Scripting XSS are possible for scripts outside of script tags. This has been fixed in versions 2.7.9, 3.0.4, 3.1.0. All users are advised to upgrade. There are no known workarounds for this...

CVE-2023-34443 Cross-site Scripting vulnerability in the run_query.php page in Combodo iTop

Combodo iTop is a simple, web based IT Service Management tool. When displaying page Run queries Cross-site Scripting XSS are possible for scripts outside of script tags. This has been fixed in versions 2.7.9, 3.0.4, 3.1.0. All users are advised to upgrade. There are no known workarounds for this...

CVE-2023-34443

CVE-2023-34443 describes a Cross-site Scripting (XSS) vulnerability in Combodo iTop, specifically on the Run queries page (run_query.php). Affected versions are prior to 2.7.9, prior to 3.0.4, and prior to 3.1.0. The issue is fixed in versions 2.7.9, 3.0.4, and 3.1.0; upgrading to these versions ...

CVE-2023-34443 Cross-site Scripting vulnerability in the run_query.php page in Combodo iTop

Combodo iTop is a simple, web based IT Service Management tool. When displaying page Run queries Cross-site Scripting XSS are possible for scripts outside of script tags. This has been fixed in versions 2.7.9, 3.0.4, 3.1.0. All users are advised to upgrade. There are no known workarounds for this...

Combodo iTop 跨站脚本漏洞

Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...

Combodo iTop 信息泄露漏洞

Combodo iTop is a suite of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. An information disclosure vulnerability exists in Combo...

Combodo iTop 跨站脚本漏洞

Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...

Combodo iTop 跨站脚本漏洞

Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...

PT-2024-24082

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.1.2 Combodo iTop versions prior to 3.2.0 Description The issue is related to a Cross-site Scripting XSS attack that can be performed when importing malicious CSV content. This can be done by filling malicious...

PT-2024-12484 · Comodo · Itop

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.9 Combodo iTop versions prior to 3.0.4 Combodo iTop versions prior to 3.1.0 Description: Combodo iTop is a simple, web-based IT Service Management tool. When displaying pages, specifically the...

PT-2024-24926 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.11 Combodo iTop versions prior to 3.0.5 Combodo iTop versions prior to 3.1.2 Combodo iTop versions prior to 3.2.0 Description: Combodo iTop is a simple, web-based IT Service Management tool. The issue allows...

PT-2024-12485

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 2.7.9 Combodo iTop versions prior to 3.0.4 Combodo iTop versions prior to 3.1.0 Description Combodo iTop is a simple, web-based IT Service Management tool. When displaying pages/ajax.render.php, XSS are possible...

Combodo iTop 跨站脚本漏洞

Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...

PT-2024-24348

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.1.2 Combodo iTop versions prior to 3.2.0 Description A CSRF issue can be performed on CSV import simulation in Combodo iTop, allowing an attacker to forge malicious requests. There are no known workarounds for...

Combodo iTop 跨站请求伪造漏洞

Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site request forgery vulnerability exists in...

PT-2024-12483 · Comodo · Combodo Itop

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.9 Combodo iTop versions prior to 3.0.4 Combodo iTop versions prior to 3.1.0 Description: The issue is related to a Cross-site Scripting XSS vulnerability in Combodo iTop, a web-based IT Service Management...

Exploit for CVE-2024-53588

iTop-privesc MY FIRST 0-DAY!!! - CVE-2024-53588 A privileg...

CVE-2024-7324

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...

CVE-2024-7324

The CVE concerns IObit iTop Data Recovery Pro 4.4.0.687, specifically the BPL Handler’s madbasic_.bpl library. The vulnerability is an uncontrolled search path due to a flaw in that library, requiring local access to trigger. Multiple sources confirm the affected component and root cause; exploit...

CVE-2024-7324 IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...