CVE-2024-7709: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in OcoMon 4.0RC1/4.0/5.0RC1. This issue affects some unknown processing of the file /includes/common/requireaccessrecovery.php of the component URL Handler. The manipulation leads to cross site scripting. The attack may be...

OcoMon security vulnerabilities

OcoMon is a helpdesk system by the individual developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. A security vulnerability exists in OcoMon version 4.0, which stems from unknown handling of the file...

CVE-2023-33559

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...

CVE-2023-33559

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...

CVE-2023-33559

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...

CVE-2023-33558

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...

CVE-2023-33558

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...

CVE-2023-33558

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...

Remote file inclusion

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...

Information disclosure

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...

OcoMon Security Vulnerability

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. A security vulnerability exists in OcoMon versions prior to v4.0.1 that stems from an information disclosure vulnerability in t...

CVE-2023-33559

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...

CVE-2023-33558

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...

CVE-2023-33559: Inclusion of Functionality from Untrusted Control Sphere

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...

OcoMon Security Vulnerability

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. A security vulnerability exists in OcoMon versions prior to v4.0.1 that stems from a local file inclusion vulnerability in...

CVE-2023-33558

CVE-2023-33558 affects OcoMon (Ocomon) prior to version 4.0.1. The vulnerability is an information disclosure in the component users-grid-data.php, allowing attackers to obtain sensitive information such as emails and usernames. Affected software: Ocomon before 4.0.1; root cause: information disc...

CVE-2023-33558: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...

CVE-2023-33559

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file...

CVE-2023-33558

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames...

CVE-2023-33559

The CVE-2023-33559 entry concerns OcoMon prior to 4.0.1, where a local file inclusion via the lang parameter enables arbitrary code execution with a crafted PHP file. Affected component: OcoMon web application; root cause: improper handling of the lang parameter leading to LFI. Impact in the sour...