Logic Flaw Vulnerability in Zhengfang Service Management Platform of Zhengfang Software Co.

hereinafter referred to as "Zhengfang", founded in January 1999, is a software enterprise and a high-tech enterprise specializing in consulting, planning, construction and service in the field of education informatization in colleges and universities. A logic flaw exists in the Zhengfang Service...

CVE-2023-43790 iTop vulnerable to XSS in friendlyname in object details

iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerability is fixed in 3.1.1 and 3.2.0...

CVE-2023-34446 iTop XSS vulnerability on pages/preferences.php

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying pages/preferences.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

CVE-2022-39214 Authenticated users of Combodo iTop can take over any account

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1...

IBM Jazz for Service Management跨站脚本漏洞

Jazz is IBM Rational's next-generation collaboration platform for software delivery technology.The Jazz platform has been carefully designed and developed specifically for global and geographically diverse teams, and will change the way people collaborate to build software - improving the...

Unauthorized Access Vulnerability in Service Management Platform of Ortho Software Co.

Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. An unauthorized access vulnerability exists in the service management platform of Zhengfang Software Co., Ltd. that can be...