317 matches found
CVE-2023-1494 IBOS ApiController.php sql injection
A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...
CVE-2023-1494 IBOS ApiController.php sql injection
A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...
CVE-2023-1494
CVE-2023-1494 affects IBOS 4.5.5; the vulnerability is in an unknown function of ApiController.php where manipulating the emailids parameter leads to SQL injection. The issue is exploitable remotely and has been disclosed publicly. Public sources consistently describe a SQL injection with potenti...
PT-2023-17031 · Ibos · Ibos
Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.5 Description: A critical issue has been found in the software. It affects an unknown function of the file ApiController.php. The manipulation of the emailids argument leads to sql injection. This issue can be exploited...
CVE-2023-1494: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...
CVE-2023-1278
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
CVE-2023-1278
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
CVE-2023-1278 IBOS index.php cross site scripting
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
CVE-2023-1278
CVE-2023-1278 affects IBOS up to 4.5.5, where the vulnerability resides in the file mobil/index.php. The issue arises from improper handling of the accesstoken parameter, enabling cross-site scripting (XSS) that can be triggered remotely. Some connected sources confirm this mapping and suggest te...
CVE-2023-1278 IBOS index.php cross site scripting
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
IBOS 跨站脚本漏洞
IBOS is a collaborative office management system. A cross-site scripting vulnerability exists in IBOS version 4.5.5 and prior versions, which stems from incorrect manipulation of the parameter acesstoken resulting in cross-site scripting...
PT-2023-16857 · Ibos · Ibos
Name of the Vulnerable Software and Affected Versions: IBOS versions up to 4.5.5 Description: A problematic issue has been found in IBOS, affecting some unknown functionality of the file mobil/index.php. The manipulation of the accesstoken argument leads to cross-site scripting. The attack can be...
CVE-2023-1278: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifi...
IBOS Command Injection Vulnerability
IBOS is a collaborative office management system. A command injection vulnerability exists in ibos IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. An attacker can exploit this vulnerability to gain server control privileges...
IBOS Command Injection Vulnerability (CNVD-2021-46548)
IBOS is a collaborative office management system. A command injection vulnerability exists in IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. No detailed vulnerability details are available at this time...
CVE-2020-21786
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php...
CVE-2020-21785
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability...