IBOS / Ibos
29 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-28265 | IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php. | CRITICAL | 9.1 | Nov 1, 2024 |
| CVE-2023-4852 | IBOS OA optimize sql injection | CRITICAL | 9.8 | Sep 9, 2023 |
| CVE-2023-4851 | IBOS OA edit&op=member sql injection | CRITICAL | 9.8 | Sep 9, 2023 |
| CVE-2023-4850 | IBOS OA del sql injection | CRITICAL | 9.8 | Sep 9, 2023 |
| CVE-2023-4849 | IBOS OA trash&op=del sql injection | CRITICAL | 9.8 | Sep 9, 2023 |
| CVE-2023-4742 | IBOS OA export&uid=X sql injection | HIGH | 8.8 | Sep 3, 2023 |
| CVE-2023-4741 | IBOS OA Delete Logs del sql injection | HIGH | 8.8 | Sep 3, 2023 |
| CVE-2023-4740 | IBOS OA Delete Draft delDraft&archiveId=0 sql injection | HIGH | 8.8 | Sep 3, 2023 |
| CVE-2023-4713 | IBOS OA addcomment addComment sql injection | HIGH | 8.8 | Sep 1, 2023 |
| CVE-2023-4545 | IBOS OA export&checkids=x sql injection | CRITICAL | 9.8 | Aug 26, 2023 |
| CVE-2023-4543 | IBOS OA export&contactids=x sql injection | CRITICAL | 9.8 | Aug 25, 2023 |
| CVE-2023-3826 | IBOS OA Interview edit&op=status sql injection | CRITICAL | 9.8 | Jul 22, 2023 |
| CVE-2023-3801 | IBOS OA Mobile Notification edit actionEdit sql injection | CRITICAL | 9.8 | Jul 20, 2023 |
| CVE-2023-3799 | IBOS OA Delete Category del sql injection | CRITICAL | 9.8 | Jul 20, 2023 |
| CVE-2023-3791 | IBOS OA Personal Office Address Book export actionExport sql injection | CRITICAL | 9.8 | Jul 20, 2023 |
| CVE-2023-3621 | IBOS OA Delete Packet delete createDeleteCommand sql injection | HIGH | 8.8 | Jul 11, 2023 |
| CVE-2023-3478 | IBOS OA Add User edit&op=member actionEdit sql injection | HIGH | 7.2 | Jun 30, 2023 |
| CVE-2023-3449 | IBOS OA Interview Management Export export&interviews=x actionExport sql injection | HIGH | 7.2 | Jun 28, 2023 |
| CVE-2023-3100 | IBOS del actionDel sql injection | CRITICAL | 9.8 | Jun 5, 2023 |
| CVE-2023-2107 | IBOS del&op=recycle sql injection | CRITICAL | 9.8 | Apr 15, 2023 |
| CVE-2023-1747 | IBOS mark&op=delFromSend sql injection | HIGH | 8.8 | Mar 30, 2023 |
| CVE-2023-1744 | IBOS htaccess unrestricted upload | HIGH | 8.8 | Mar 30, 2023 |
| CVE-2023-1742 | IBOS Report Search getlist sql injection | HIGH | 8.8 | Mar 30, 2023 |
| CVE-2023-1494 | IBOS ApiController.php sql injection | CRITICAL | 9.8 | Mar 18, 2023 |
| CVE-2023-1278 | IBOS index.php cross site scripting | MEDIUM | 6.1 | Mar 8, 2023 |
Showing 1 to 25 of 29 CVEs