Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2023/10/25 3:35 p.m.•47 views

CVE-2023-34447 iTop XSS vulnerability on pages/UI.php

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS8.3AI score0.00676EPSS
SaveExploits0References3
Mend
Mend
•added 2023/10/25 3:35 p.m.•7 views

CVE-2023-34447

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS0.00676EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/10/25 3:35 p.m.•26 views

CVE-2023-34447 iTop XSS vulnerability on pages/UI.php

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS6AI score0.00676EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•3 views

CVE-2023-34447: Improper Neutralization of Input During Web Page Generation

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

8.8CVSS5.6AI score0.00676EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/20 12:00 a.m.•8 views

CVE-2013-0805: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the search feature in iTop aka IT Operations Portal 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to pages/UI.php or 2 expression parameter to pages/runquery.php. NOTE: some ...

4.3CVSS5.9AI score0.01661EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2014/03/20 12:00 a.m.•7 views

PT-2014-2463

Name of the Vulnerable Software and Affected Versions iTop versions 2.0, 1.2.1, 1.2, and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the search feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specificall...

4.3CVSS0.01661EPSS
SaveExploits0References9
Rows per page
Query Builder