The vulnerability of the admin-center component of the i-doit Pro software, which is used for creating and managing inventory database systems, allows a hacker to execute arbitrary code.

The vulnerability of the admin-center component in the i-doit Pro IT infrastructure management tool is related to weak password requirements during account creation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by loading a malicious plugin remotely...

CVE-2023-46003

I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...

CVE-2023-37756

I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack...

CVE-2023-37739

i-doit Pro v25 and below was discovered to be vulnerable to path traversal...

PT-2023-26095 · Unknown · I-Doit Open +1

Name of the Vulnerable Software and Affected Versions: i-doit pro versions 25 and below I-doit open versions 25 and below Description: The software is configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and...

i-doit Open 跨站脚本漏洞

i-doit is a configuration management database software from i-doit Inc. A cross-site scripting vulnerability exists in i-doit Open v24, which stems from a timeout parameter on the login page containing reflected cross-site scripting XSS...

CVE-2019-6965

An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter...