145 matches found
CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below
CVE-2023-34830 – Reflektiertes XSS in i-doit Open v24 und niedriger gefunden i-doit Open v24 und niedriger sind anfällig für eine Reflected-XSS-Schwachstelle. Diese Schwachstellen könnten es remote authentifizierten Angreifern ermöglichen, beliebigen Web-Script- oder HTML-Code einzuschleusen...
CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below
CVE-2023-37756 – Requisito di password debole nell'admin-center che porta al caricamento di plugin dannosi in i-doit Pro 25 e versioni precedenti i-doit Pro 25 e versioni precedenti sono vulnerabili a una vulnerabilità di requisiti di password deboli nell'admin-center e al caricamento di plugin...
CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below
CVE-2023-37739 - Path Traversal in i-doit Pro 25 e versioni precedenti i-doit Pro 25 e versioni precedenti sono vulnerabili a una vulnerabilità di Path Traversal. Queste vulnerabilità potrebbero consentire a utenti remoti autenticati con privilegi bassi o alti di navigare verso posizioni che non...
CVE-2023-46003
CVE-2023-46003 Stored XSS in i-doit Pro 25 e versioni precedenti i-doit Pro 25 e versioni precedenti sono vulnerabili a una vulnerabilità Stored XSS. Questa vulnerabilità consente a utenti malintenzionati remoti autenticati con privilegi bassi o alti di memorizzare dati pericolosi payload XSS o...
CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below
CVE-2023-37755 - Credenziali di amministrazione hardcoded in i-doit Pro 25 e versioni precedenti i-doit Pro 25 e versioni precedenti sono vulnerabili a una vulnerabilità di credenziali di amministrazione hardcoded. Queste vulnerabilità potrebbero consentire a chiunque di accedere come...
CVE-2019-25582
i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php. Attackers can send GET requests to index.php with filemanager=image and supply arbitrary file paths like...
CVE-2019-25582 i-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter
i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php. Attackers can send GET requests to index.php with filemanager=image and supply arbitrary file paths like...
i-doit CMDB 代码问题漏洞
i-doit CMDB is a product of the German company i-doit. There is a code vulnerability in i-doit CMDB version 1.12. This vulnerability stems from the use of the file parameter, which allows arbitrary file downloads, potentially enabling authenticated attackers to download sensitive files...
PT-2026-26929
i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the objGroupID parameter. Attackers can send GET requests with crafted SQL payloads in the objGroupID parameter to extract sensitive...
i-doit Open Source CMDB 安全漏洞
i-doit Open Source CMDB is a configuration management database system developed by the German company i-doit. Version 1.14.1 of i-doit Open Source CMDB contains a security vulnerability. This vulnerability stems from a file deletion vulnerability in the deleteimport parameter of the import module...
EUVD-2013-1451
Malware in sbrugna...
EUVD-2020-6039
Malware in sbrugna...
EUVD-2014-1673
Malware in sbrugna...
EUVD-2014-1315
Malware in sbrugna...
EUVD-2020-6040
Malware in sbrugna...
EUVD-2021-26495
Malware in sbrugna...
EUVD-2014-2271
Malware in sbrugna...
EUVD-2019-16519
Malware in sbrugna...