Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ObmOpen Business Management2.4.0

4 matches found

CVE
CVE•added 2012/08/31 9:55 p.m.•38 views

CVE-2011-5142

Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tf_delegation, (2) tf_ip, or (3) tf_name parameter in a search action to host/host_index.php; (4) login par...

4.3CVSS5.9AI score0.00357EPSS
Web
CVE
CVE•added 2012/08/31 9:55 p.m.•36 views

CVE-2011-5145

Multiple SQL injection vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sel_domain_id or (2) action parameter to obm.php; (3) tf_user parameter in a search action to group/group_index.php...

5.5CVSS8.3AI score0.00302EPSS
Web
CVE
CVE•added 2012/08/31 9:55 p.m.•34 views

CVE-2011-5144

Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.

5CVSS6.5AI score0.00319EPSS
CVE
CVE•added 2012/08/31 9:55 p.m.•29 views

CVE-2011-5141

Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the module parameter in an export_page action.

6CVSS6.9AI score0.00674EPSS
Web