CVE-2023-46003

CVE-2023-46003 XSS almacenado en i-doit Pro 25 y versiones anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de XSS almacenado. Esto podría permitir a atacantes autenticados remotos con privilegios bajos o altos almacenar datos peligrosos payload XSS o página HT...

CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - Path Traversal en i-doit Pro 25 y anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de Path Traversal. Estas vulnerabilidades podrían permitir a atacantes autenticados remotos con privilegios bajos o altos navegar a ubicaciones que no deberían s...

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Requisito de contraseña débil en admin-center conduce a la carga de un plugin malicioso en i-doit Pro 25 y anteriores i-doit Pro 25 y anteriores son vulnerables a una vulnerabilidad de requisito de contraseña débil en admin-center + la carga de un plugin malicioso conduce a una...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Credencial de administrador codificada en i-doit Pro 25 y versiones anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de credencial de administrador codificada. Estas vulnerabilidades permiten que cualquier persona inicie sesión como administrad...

EUVD-2014-2271

Malware in sbrugna...

EUVD-2014-1315

Malware in sbrugna...

EUVD-2023-41632

Malicious code in bioql PyPI...

EUVD-2023-50265

Malicious code in bioql PyPI...

EUVD-2023-41616

Malicious code in bioql PyPI...

CVE-2023-37739

i-doit Pro v25 and below was discovered to be vulnerable to path traversal...

CVE-2023-37755

i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vulnerability to obtain Administrator...

CVE-2014-2231

Cross-site scripting XSS vulnerability in the API in synetics i-doit pro before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via a property title...

CVE-2023-46003

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

Cross site scripting

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

CVE-2023-46003

CVE-2023-46003 affects i-doit pro 25 and below, with a Cross-Site Scripting (XSS) vulnerability exploitable via the index.php endpoint. Available sources consistently state the issue but do not provide exploit details. Potential remediation notes from a PT Security advisory suggest deprioritizing...

CVE-2023-46003

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

CVE-2023-46003

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

I-doit pro Cross-Site Scripting Vulnerability

i-doit is a configuration management database software from i-doit Inc. A security vulnerability exists in I-doit pro 25 and prior versions that stems from vulnerability to cross-site scripting XSS attacks via index.php...

CVE-2023-37756

I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack...

Code injection

I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack...