Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CorebosCorebos

9 matches found

CVE
CVE•added 2023/06/02 5:15 p.m.•101 views

CVE-2023-3069

Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.

9.8CVSS8.8AI score0.00078EPSS
CVE
CVE•added 2023/06/02 7:15 p.m.•97 views

CVE-2023-3073

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.

6.5CVSS5.4AI score0.0006EPSS
CVE
CVE•added 2022/12/13 12:15 p.m.•55 views

CVE-2022-4446

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.

9.8CVSS9.7AI score0.00264EPSS
CVE
CVE•added 2023/03/21 12:15 a.m.•39 views

CVE-2023-1527

Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.

8.3CVSS5.7AI score0.00062EPSS
CVE
CVE•added 2018/06/26 4:29 p.m.•34 views

CVE-2018-1000547

coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to. .

5.3CVSS5.2AI score0.00155EPSS
CVE
CVE•added 2023/06/02 5:15 p.m.•34 views

CVE-2023-3070

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

7.6CVSS5.5AI score0.00096EPSS
CVE
CVE•added 2023/06/02 6:15 p.m.•30 views

CVE-2023-3074

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

8.6CVSS5.7AI score0.00062EPSS
CVE
CVE•added 2023/06/02 6:15 p.m.•30 views

CVE-2023-3075

Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.

7.5CVSS6.8AI score0.00073EPSS
CVE
CVE•added 2023/11/17 1:15 p.m.•23 views

CVE-2023-48029

Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of...

8CVSS7.8AI score0.0037EPSS