5 matches found
Cross site scripting
I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-46003
CVE-2023-46003 affects i-doit pro 25 and below, with a Cross-Site Scripting (XSS) vulnerability exploitable via the index.php endpoint. Available sources consistently state the issue but do not provide exploit details. Potential remediation notes from a PT Security advisory suggest deprioritizing...
CVE-2023-46003
I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-46003
I-doit pro 25 and below is vulnerable to Cross Site Scripting XSS via index.php...
CVE-2023-37755
CVE-2023-37755 affects i-doit Pro 25 and below and i-doit Open 25 and below, with insecure default administrator credentials and no user prompt to change them. Unauthenticated attackers could gain Administrator privileges and perform arbitrary system operations or cause a DoS. The connected sourc...