IBOS

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

IBOS records in CISA KEV

No IBOS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ibos 29 records HIGH

Records

29 records in Ibos · all components

TI-2024-18815 CVE-2024-28265 · GHSA-hrrg-wvpp-2p2q

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

HIGH 78

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00459 Published 2024-11-01 No fix listed CWE-459

TI-2023-04468 CVE-2023-4852 · GHSA-cq4c-4r36-mfc9

IBOS OA optimize sql injection

HIGH 75

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-04466 CVE-2023-4850 · GHSA-w64v-g398-2hjx

IBOS OA del sql injection

HIGH 75

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-04465 CVE-2023-4849 · GHSA-pq22-x2j3-r282

IBOS OA trash&op=del sql injection

HIGH 75

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-02906 CVE-2023-3100 · GHSA-hj8c-f98r-r4m8

IBOS del actionDel sql injection

HIGH 75

A vulnerability, which was classified as critical, has been found in IBOS 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00739 Published 2023-06-05 No fix listed CWE-89

TI-2023-01982 CVE-2023-2107 · GHSA-r854-j9fc-cqw2

IBOS del&op=recycle sql injection

HIGH 75

A vulnerability, which was classified as critical, was found in IBOS 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-04-15 No fix listed CWE-89

TI-2023-01413 CVE-2023-1494 · GHSA-9j7q-jgxh-932x

IBOS ApiController.php sql injection

HIGH 75

A vulnerability classified as critical has been found in IBOS 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2023-03-18 No fix listed CWE-89

TI-2023-04370 CVE-2023-4742 · GHSA-956r-q88m-f6fg

IBOS OA export&uid=X sql injection

HIGH 73

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00801 Published 2023-09-03 No fix listed CWE-89

TI-2023-04369 CVE-2023-4741 · GHSA-5xjq-5qxg-9fvp

IBOS OA Delete Logs del sql injection

HIGH 71

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00931 Published 2023-09-03 No fix listed CWE-89

TI-2023-04368 CVE-2023-4740 · GHSA-8f63-jh8r-7233

IBOS OA Delete Draft delDraft&archiveId=0 sql injection

HIGH 71

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0086 Published 2023-09-03 No fix listed CWE-89

TI-2023-04343 CVE-2023-4713 · GHSA-rx8f-xw24-vf8j

IBOS OA addcomment addComment sql injection

HIGH 71

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00801 Published 2023-09-01 No fix listed CWE-89

TI-2023-03248 CVE-2023-3478 · GHSA-ghq6-mwc8-hg9r

IBOS OA Add User edit&op=member actionEdit sql injection

HIGH 65

A vulnerability classified as critical was found in IBOS OA 4.5.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00757 Published 2023-06-30 No fix listed CWE-89

TI-2023-04191 CVE-2023-4545 · GHSA-695q-j34x-vcjq

IBOS OA export&checkids=x sql injection

MEDIUM 44

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00842 Published 2023-08-26 No fix listed CWE-89

TI-2023-04189 CVE-2023-4543 · GHSA-cf3h-f43g-g694

IBOS OA export&contactids=x sql injection

MEDIUM 44

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00904 Published 2023-08-25 No fix listed CWE-89

TI-2020-14164 CVE-2020-21786 · GHSA-pj38-fjfr-xp7q

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via…

MEDIUM 44

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01118 Published 2021-06-24 No fix listed CWE-434

TI-2023-04467 CVE-2023-4851 · GHSA-27v9-jf76-68p4

IBOS OA edit&op=member sql injection

MEDIUM 43

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-03575 CVE-2023-3826 · GHSA-574q-p5x8-j64w

IBOS OA Interview edit&op=status sql injection

MEDIUM 43

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0068 Published 2023-07-22 No fix listed CWE-89

TI-2023-03552 CVE-2023-3801 · GHSA-59c5-vp3j-xvpm

IBOS OA Mobile Notification edit actionEdit sql injection

MEDIUM 43

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2023-07-20 No fix listed CWE-89

TI-2023-03550 CVE-2023-3799 · GHSA-rvhq-rj9x-9rrg

IBOS OA Delete Category del sql injection

MEDIUM 43

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00739 Published 2023-07-20 No fix listed CWE-89

TI-2023-03542 CVE-2023-3791 · GHSA-3vpv-p324-w48m

IBOS OA Personal Office Address Book export actionExport sql injection

MEDIUM 43

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00624 Published 2023-07-20 No fix listed CWE-89

TI-2020-14163 CVE-2020-21785 · GHSA-cc3f-9j5h-rjr3

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.

MEDIUM 43

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02726 Published 2021-06-24 No fix listed CWE-77

TI-2023-01637 CVE-2023-1744 · GHSA-q4fh-5hgq-7rcc

IBOS htaccess unrestricted upload

MEDIUM 40

A vulnerability classified as critical was found in IBOS 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00862 Published 2023-03-30 No fix listed CWE-434

TI-2023-03380 CVE-2023-3621 · GHSA-8hg6-792r-jm3p

IBOS OA Delete Packet delete createDeleteCommand sql injection

LOW 39

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00747 Published 2023-07-11 No fix listed CWE-89

TI-2023-01640 CVE-2023-1747 · GHSA-v85f-w8hc-72wx

IBOS mark&op=delFromSend sql injection

LOW 39

A vulnerability has been found in IBOS up to 4.5.4 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00717 Published 2023-03-30 No fix listed CWE-89

TI-2023-01635 CVE-2023-1742 · GHSA-j9j8-4xx7-8445

IBOS Report Search getlist sql injection

LOW 39

A vulnerability was found in IBOS 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00717 Published 2023-03-30 No fix listed CWE-89

Open these records in search →