840 matches found
Combodo iTop 跨站脚本漏洞
Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...
PT-2024-24926 · Comodo +1 · Itop +1
Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.11 Combodo iTop versions prior to 3.0.5 Combodo iTop versions prior to 3.1.2 Combodo iTop versions prior to 3.2.0 Description: Combodo iTop is a simple, web-based IT Service Management tool. The issue allows...
Combodo iTop 信息泄露漏洞
Combodo iTop is a suite of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. An information disclosure vulnerability exists in Combo...
Combodo iTop 跨站脚本漏洞
Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in Combodo iT...
PT-2024-12483 · Comodo · Combodo Itop
Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.9 Combodo iTop versions prior to 3.0.4 Combodo iTop versions prior to 3.1.0 Description: The issue is related to a Cross-site Scripting XSS vulnerability in Combodo iTop, a web-based IT Service Management...
Combodo iTop 跨站请求伪造漏洞
Combodo iTop is a set of open source web applications developed by Combodo France based on ITIL and used for the daily operation of IT environments. The program provides incident management, configuration management and problem management. A cross-site request forgery vulnerability exists in...
Exploit for CVE-2024-53588
iTop-privesc MY FIRST 0-DAY!!! - CVE-2024-53588 A privileg...
CVE-2024-7324
A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...
CVE-2024-7324 IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path
A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...
CVE-2024-7324
The CVE concerns IObit iTop Data Recovery Pro 4.4.0.687, specifically the BPL Handler’s madbasic_.bpl library. The vulnerability is an uncontrolled search path due to a flaw in that library, requiring local access to trigger. Multiple sources confirm the affected component and root cause; exploit...
PT-2024-5613 · Iobit · Iobit Itop Data Recovery Pro
Name of the Vulnerable Software and Affected Versions: IObit iTop Data Recovery Pro version 4.4.0.687 Description: The issue is related to an uncontrolled search path element in the BPL Handler component of the IObit iTop Data Recovery Pro. This can be exploited to execute arbitrary commands. Loc...
IObit iTop Data Recovery Pro 代码问题漏洞
IObit iTop Data Recovery Pro is a data recovery software from IObit. A code issue vulnerability exists in IObit iTop Data Recovery Pro version 4.4.0.687, which stems from an unknown operation in the madbasic.bpl library that can result in an uncontrolled search path...
The vulnerability in the iTop web tool for managing IT services arises from an incorrect limitation on the path to the restricted access catalog, allowing a perpetrator to disclose protected information.
The vulnerability of the iTop IT service management web tool is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
CVE-2023-48710
iTop is an IT service management platform. Files from the env-production folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The pages/exec.php script as been...
CVE-2023-45808
iTop is an IT service management platform. When creating or updating an object, extkey values aren't checked to be in the current user silo. In other words, by forging an http request, the user can create objects pointing to out of silo objects for example a UserRequest in an out of scope...
CVE-2023-48709
iTop is an IT service management platform. When exporting data from backoffice or portal in CSV or Excel files, users' inputs may include malicious formulas that may be imported into Excel. As Excel 2016 does not prevent Remote Code Execution by default, uninformed users may become victims. This...
CVE-2023-47622
iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1...
CVE-2023-47626
iTop is an IT service management platform. When displaying/editing the user's personal tokens, XSS attacks are possible. This vulnerability is fixed in 3.1.1...
CVE-2023-47123
iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an XSS attack can be performed when this object will displayed as an n:n relation item in another object. This vulnerability is fixed in 3.1.1 and 3.2.0...