Lucene search
+L

44 matches found

Kitploit
Kitploit
added 2026/09/06 1:58 a.m.9 views

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - i-doit Pro 25 及以下版本中的硬编码管理员凭据 i-doit Pro 25 及以下版本存在硬编码管理员凭据漏洞。该漏洞使任何人都可以使用用户名“admin”和密码“admin”登录为管理员。 产品描述:i-doit 是一款基于 Web 的开源 IT 文档和 CMDB(配置管理数据库)软件,由 synetics GmbH 开发。i-doit Pro 是该软件的商业版本,需要付费许可。它附带了额外功能、专业支持以及定期更新和增强功能。用户需要购买许可证才能使用 i-doit Pro,其费用根据用户数量和所需功能而有所不同。 漏洞描述:我们发现该...

9.8CVSS8.1AI score0.01094EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 6:30 p.m.5 views

CVE-2023-46003

CVE-2023-46003(i-doit Pro 25 及以下版本中的存储型 XSS) i-doit Pro 25 及以下版本存在存储型 XSS 漏洞。这些漏洞可能允许远程认证攻击者(低权限或高权限)将危险数据(XSS 载荷或伪造的 HTML 页面)存储到数据库中,当网页加载时将会触发 XSS 载荷。 产品描述: i-doit 是一款基于 Web 的 IT 文档和 CMDB(配置管理数据库)软件,由 synetics GmbH 开发。i-doit Pro 是该软件的商业版本,需要付费许可证。它附带附加功能、专业支持以及定期更新和增强。用户需要购买许可证才能使用 i-doit...

5.4CVSS5.5AI score0.00517EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 10:42 a.m.10 views

CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - i-doit Pro 25 及以下版本中的路径遍历漏洞 i-doit Pro 25 及以下版本存在路径遍历漏洞。这些漏洞可能允许远程认证攻击者(低权限或高权限)导航到用户不应访问的位置。该漏洞可用于读取和/或访问敏感文件。 产品描述:i-doit 是由 synetics GmbH 开发的基于 Web 的 IT 文档和 CMDB(配置管理数据库),i-doit Pro 是该软件的商业版本,需要付费许可证。它附带附加功能、专业支持以及定期更新和增强功能。用户需要购买许可证才能使用 i-doit Pro,其价格因用户数量和所需功能而异。 漏洞描述:我们发现该...

6.5CVSS6.6AI score0.01115EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 9:24 a.m.4 views

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – i-doit Pro 25及以下版本中admin-center的弱密码要求导致恶意插件上传 i-doit Pro 25及以下版本存在admin-center弱密码要求漏洞,并结合恶意插件上传可导致远程代码执行(RCE)漏洞。这些漏洞可能允许攻击者轻易通过暴力破解或密码猜测获取admin-center访问权限,并上传恶意插件以实现远程代码执行。 产品描述:i-doit是一款基于Web的开源IT文档与CMDB(配置管理数据库)软件,由synetics GmbH开发。i-doit...

9.8CVSS8AI score0.01191EPSS
SaveExploits2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-2271

Malware in sbrugna...

4.3CVSS6.4AI score0.00939EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-1315

Malware in sbrugna...

4.3CVSS6.4AI score0.01733EPSS
SaveExploits1References11
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2023-41632

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01191EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2023-50265

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00517EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2023-41616

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.01115EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:05 a.m.20 views

CVE-2023-37739

i-doit Pro v25 and below was discovered to be vulnerable to path traversal...

6.5CVSS7.2AI score0.01115EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:29 a.m.14 views

CVE-2023-37755

i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vulnerability to obtain Administrator...

9.8CVSS7.1AI score0.01094EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 1:40 p.m.22 views

CVE-2014-2231

Cross-site scripting XSS vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via a property title...

4.3CVSS5.8AI score0.00939EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/10/21 1:15 a.m.20 views

CVE-2023-46003

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

5.4CVSS5.8AI score0.00517EPSS
SaveExploits1References5
Prion
Prion
added 2023/10/21 1:15 a.m.34 views

Cross site scripting

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

4.9CVSS5.3AI score0.00517EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/10/21 12:00 a.m.77 views

CVE-2023-46003

CVE-2023-46003 affects i-doit pro 25 and below, with a Cross-Site Scripting (XSS) vulnerability exploitable via the index.php endpoint. Available sources consistently state the issue but do not provide exploit details. Potential remediation notes from a PT Security advisory suggest deprioritizing...

5.4CVSS5.3AI score0.00517EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/21 12:00 a.m.17 views

CVE-2023-46003

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

5.3AI score0.00517EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/10/21 12:00 a.m.13 views

I-doit pro Cross-Site Scripting Vulnerability

i-doit is a configuration management database software from i-doit Inc. A security vulnerability exists in I-doit pro 25 and prior versions that stems from vulnerability to cross-site scripting XSS attacks via index.php...

5.4CVSS5.9AI score0.00517EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/10/21 12:00 a.m.33 views

CVE-2023-46003

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

5.5AI score0.00517EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/14 9:15 p.m.9 views

CVE-2023-37756

I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack...

9.8CVSS7.3AI score0.01191EPSS
SaveExploits2References4
Prion
Prion
added 2023/09/14 9:15 p.m.27 views

Code injection

I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack...

7.5CVSS9.4AI score0.01191EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder