CVE-2023-4713

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function addComment of the file ?r=weibo/comment/addcomment. The manipulation of the argument touid leads to sql injection. The exploit has been disclosed to the public and may be used. The...

IBOS SQL注入漏洞

IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS v4.5.5, which originates from the presence of an unknown function in the path file/personal/del&op=recycle, which leads to a sql injection via the parameter fids...

PT-2023-17209 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.5 Description: A critical issue was found in the htaccess Handler component, allowing for unrestricted upload. This can be initiated remotely. The issue has been publicly disclosed and may be exploited. Recommendations: For...