Vulnerabilities

TI-2024-18815 CVE-2024-28265 · GHSA-hrrg-wvpp-2p2q

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

HIGH 78

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00459 Published 2024-11-01 No fix listed CWE-459

TI-2023-04468 CVE-2023-4852 · GHSA-cq4c-4r36-mfc9

IBOS OA optimize sql injection

HIGH 75

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-04467 CVE-2023-4851 · GHSA-27v9-jf76-68p4

IBOS OA edit&op=member sql injection

MEDIUM 43

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-04466 CVE-2023-4850 · GHSA-w64v-g398-2hjx

IBOS OA del sql injection

HIGH 75

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-04465 CVE-2023-4849 · GHSA-pq22-x2j3-r282

IBOS OA trash&op=del sql injection

HIGH 75

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-09-09 No fix listed CWE-89

TI-2023-04370 CVE-2023-4742 · GHSA-956r-q88m-f6fg

IBOS OA export&uid=X sql injection

HIGH 73

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00801 Published 2023-09-03 No fix listed CWE-89

TI-2023-04369 CVE-2023-4741 · GHSA-5xjq-5qxg-9fvp

IBOS OA Delete Logs del sql injection

HIGH 71

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00931 Published 2023-09-03 No fix listed CWE-89

TI-2023-04368 CVE-2023-4740 · GHSA-8f63-jh8r-7233

IBOS OA Delete Draft delDraft&archiveId=0 sql injection

HIGH 71

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0086 Published 2023-09-03 No fix listed CWE-89

TI-2023-04343 CVE-2023-4713 · GHSA-rx8f-xw24-vf8j

IBOS OA addcomment addComment sql injection

HIGH 71

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00801 Published 2023-09-01 No fix listed CWE-89

TI-2023-04191 CVE-2023-4545 · GHSA-695q-j34x-vcjq

IBOS OA export&checkids=x sql injection

MEDIUM 44

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00842 Published 2023-08-26 No fix listed CWE-89

TI-2023-04189 CVE-2023-4543 · GHSA-cf3h-f43g-g694

IBOS OA export&contactids=x sql injection

MEDIUM 44

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00904 Published 2023-08-25 No fix listed CWE-89

TI-2023-03575 CVE-2023-3826 · GHSA-574q-p5x8-j64w

IBOS OA Interview edit&op=status sql injection

MEDIUM 43

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0068 Published 2023-07-22 No fix listed CWE-89

TI-2023-03552 CVE-2023-3801 · GHSA-59c5-vp3j-xvpm

IBOS OA Mobile Notification edit actionEdit sql injection

MEDIUM 43

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2023-07-20 No fix listed CWE-89

TI-2023-03550 CVE-2023-3799 · GHSA-rvhq-rj9x-9rrg

IBOS OA Delete Category del sql injection

MEDIUM 43

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00739 Published 2023-07-20 No fix listed CWE-89

TI-2023-03542 CVE-2023-3791 · GHSA-3vpv-p324-w48m

IBOS OA Personal Office Address Book export actionExport sql injection

MEDIUM 43

A vulnerability was found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00624 Published 2023-07-20 No fix listed CWE-89

TI-2023-03380 CVE-2023-3621 · GHSA-8hg6-792r-jm3p

IBOS OA Delete Packet delete createDeleteCommand sql injection

LOW 39

A vulnerability was found in IBOS OA 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00747 Published 2023-07-11 No fix listed CWE-89

TI-2023-03248 CVE-2023-3478 · GHSA-ghq6-mwc8-hg9r

IBOS OA Add User edit&op=member actionEdit sql injection

HIGH 65

A vulnerability classified as critical was found in IBOS OA 4.5.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00757 Published 2023-06-30 No fix listed CWE-89

TI-2023-03222 CVE-2023-3449 · GHSA-5v59-rh45-x626

IBOS OA Interview Management Export export&interviews=x actionExport sql injection

LOW 33

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00882 Published 2023-06-28 No fix listed CWE-89

TI-2023-02906 CVE-2023-3100 · GHSA-hj8c-f98r-r4m8

IBOS del actionDel sql injection

HIGH 75

A vulnerability, which was classified as critical, has been found in IBOS 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00739 Published 2023-06-05 No fix listed CWE-89

TI-2023-01982 CVE-2023-2107 · GHSA-r854-j9fc-cqw2

IBOS del&op=recycle sql injection

HIGH 75

A vulnerability, which was classified as critical, was found in IBOS 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-04-15 No fix listed CWE-89

TI-2023-01640 CVE-2023-1747 · GHSA-v85f-w8hc-72wx

IBOS mark&op=delFromSend sql injection

LOW 39

A vulnerability has been found in IBOS up to 4.5.4 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00717 Published 2023-03-30 No fix listed CWE-89

TI-2023-01637 CVE-2023-1744 · GHSA-q4fh-5hgq-7rcc

IBOS htaccess unrestricted upload

MEDIUM 40

A vulnerability classified as critical was found in IBOS 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00862 Published 2023-03-30 No fix listed CWE-434

TI-2023-01635 CVE-2023-1742 · GHSA-j9j8-4xx7-8445

IBOS Report Search getlist sql injection

LOW 39

A vulnerability was found in IBOS 4.5.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00717 Published 2023-03-30 No fix listed CWE-89

TI-2023-01413 CVE-2023-1494 · GHSA-9j7q-jgxh-932x

IBOS ApiController.php sql injection

HIGH 75

A vulnerability classified as critical has been found in IBOS 4.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2023-03-18 No fix listed CWE-89

TI-2023-01207 CVE-2023-1278 · GHSA-g777-c9j6-jxh3

IBOS index.php cross site scripting

LOW 28

A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00508 Published 2023-03-08 No fix listed CWE-79

Vulnerabilities

Filters