PT-2020-13263 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability. This means that attackers can execute specific commands by forging requests from a malicious site...

PT-2020-13260 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue concerns the lack of validation for inputted parameters, allowing attackers to inject malicious commands and initiate a cross-site scripting XSS attack. There is no informati...

PT-2020-13259 · Comodo +1 · Combodo Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to Broken Access Control in a function within Combodo iTop. This allows an unauthorized attacker to inject commands and disclose system information. Recommendation...

PT-2020-13261 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to a stored Cross-site Scripting vulnerability. This can be exploited by uploading a file that contains a malicious script. Recommendations: At the moment, there i...

PT-2020-13262 · Comodo +1 · Combodo Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: A security misconfiguration exists in Combodo iTop, which can expose sensitive information. Recommendations: At the moment, there is no information about a newer version that contains ...

Combodo iTop Cross-Site Scripting Vulnerability

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The tool provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in shortcut names ...

Combodo iTop Cross-Site Scripting Vulnerability (CNVD-2020-35968)

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in the id of th...

CVE-2020-11696

In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages community, essential, professional in version 2.7.0 and iTop essential and iTop professional in version 2.6.4...

CVE-2020-11696

In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages community, essential, professional in version 2.7.0 and iTop essential and iTop professional in version 2.6.4...

Cross site scripting

In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages community, essential, professional in version 2.7.0 and iTop essential and iTop professional in version 2.6.4...

CVE-2020-11697

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages community, essential, professional for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4...

CVE-2020-11697

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages community, essential, professional for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4...

Cross site scripting

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages community, essential, professional for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4...

CVE-2020-11696

In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages community, essential, professional in version 2.7.0 and iTop essential and iTop professional in version 2.6.4...

CVE-2020-11696

CVE-2020-11696 is a stored XSS issue in Combodo iTop where a menu shortcut name could be exploited. The description specifies affected iTop packages and versions, with a fix in all iTop packages in version 2.7.0 and in iTop essential and iTop professional in version 2.6.4. Connected sources refer...

CVE-2020-11697

Combodo iTop is affected by a reflected XSS in dashboard IDs. The issue is fixed in all iTop packages for version 2.7.0, and in iTop essential and professional packages for version 2.6.4. Affected products and versions outside those ranges are not specified in the provided documents. Exploitation...

CVE-2020-11697

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages community, essential, professional for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4...

PT-2020-12783 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.6.4 iTop versions prior to 2.7.0 Description: The issue concerns a stored XSS payload that can be exploited through a menu shortcut name in iTop. Recommendations: For versions prior to 2.6.4, update to version 2.6.4 o...

PT-2020-12784 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.7.0 iTop essential and iTop professional versions prior to 2.6.4 Description: The issue allows dashboard ids to be exploited with a reflective XSS payload. Recommendations: For versions prior to 2.7.0, update to versi...

Unspecified Vulnerability in Combodo iTop

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The tool provides incident management, configuration management and problem management. A security vulnerability exists in Combodo iTop versions prior...