TI-2022-04063 CVE-2022-4446 · GHSA-7xcv-hwp5-79fx
PHP Remote File Inclusion in tsolucio/corebos
Priority HIGH 75
PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
Corebos
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Corebos records in CISA KEVNo Corebos vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Corebos · all components
TI-2023-26007 CVE-2023-48029 · GHSA-674m-h5xx-v6gp
Corebos 8.0 and below is vulnerable to CSV Injection.
Priority HIGH 70
Corebos 8.0 and below is vulnerable to CSV Injection.
TI-2023-02880 CVE-2023-3074 · GHSA-p9vj-c5qh-4c5j
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Priority MEDIUM 64
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
TI-2023-02879 CVE-2023-3073 · GHSA-fmwg-q6rr-267q
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
TI-2023-02876 CVE-2023-3070 · GHSA-gxfx-w4rg-8764
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
TI-2023-01441 CVE-2023-1527 · GHSA-5rvj-4rxp-67hv
Cross-site Scripting (XSS) - Generic in tsolucio/corebos
Priority MEDIUM 58
Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
TI-2023-02875 CVE-2023-3069 · GHSA-gfxr-mvph-45qr
Unverified Password Change in tsolucio/corebos
Priority MEDIUM 43
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
TI-2023-02881 CVE-2023-3075 · GHSA-3362-hf4h-mq66
Cross-Site Request Forgery (CSRF) in tsolucio/corebos
Priority LOW 29
Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
TI-2018-15943 CVE-2018-1000547 · GHSA-fqrq-8c5q-mpcp
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in…
Priority LOW 26
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to.