Filter

iTopiTop limit pages/exec.php script to PHP files

First published (updated )

iTopCombodo iTop's weak password reset token leads to account takeover

First published (updated )

iTopAuthenticated users of Combodo iTop can take over any account

First published (updated )

iTopXSS in csvimport in 3.0.0-beta versions

First published (updated )

iTopCross-site Scripting in Combodo iTop

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopiTop vulnerable to XSS vulnerability in dashlet refresh

8.8
First published (updated )

iTopiTop vulnerable to XSS vulnerability in authent-token

8.8
First published (updated )

iTopCross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop

8.8
First published (updated )

iTopCross-site Scripting vulnerability in the run_query.php page in Combodo iTop

8.8
First published (updated )

iTopCross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopCross-site Scripting vulnerability in link CSV import in Combodo iTop

8.8
First published (updated )

iTopCSRF security issue on CSV import in Combodo iTop

8.8
First published (updated )

iTopSSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop

8.8
First published (updated )

iTopCross-Site Request Forgery (CSRF) in several iTop pages

8.8
First published (updated )

iTopNo CSRF form token cleanup on Windows servers

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopCommand Injection vulnerability in the Setup Wizard

8.8
First published (updated )

iTopCombodo iTop - CSRF

8.8
First published (updated )

iTopCode Injection in Combodo iTop

8.8
First published (updated )

iTopiTop XSS vulnerability on pages/preferences.php

8.8
First published (updated )

iTopiTop XSS vulnerability on pages/UI.php

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopiTop vulnerable to XSS vulnerability in n:n relations "tagset" widget

8.7
First published (updated )

iTopUnauthorized setup leads to SSRF in Combodo/iTop

8.7
First published (updated )

iTopStored Cross-site Scripting in Combodo iTop

8.7
First published (updated )

iTopReflected Cross-site Scripting exploit in Combodo iTop

8.1
First published (updated )

iTopReflected XSS in Combodo/iTop

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopXSS

8.1
First published (updated )

iTopXSS, Race Condition

8.1
First published (updated )

iTopPossible Cross-Site Request Forgery in Combodo iTop

8.1
First published (updated )

iTopiTop vulnerable to potential formula injection in Excel/CSV export file

First published (updated )

iTopPortal : the CSRF token isn't validated

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203