Filters

Combodo iTopSSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop

8.8
First published (updated )

Combodo iTopUsers enumeration allowed through Rest API in Combodo iTop

7.5
First published (updated )

Combodo iTopCSRF security issue on CSV import in Combodo iTop

8.8
First published (updated )

Combodo iTopCross-site Scripting vulnerability in link CSV import in Combodo iTop

8.8
First published (updated )

Combodo iTopCross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopCross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop

8.8
First published (updated )

Combodo iTopCross-site Scripting vulnerability in the run_query.php page in Combodo iTop

8.8
First published (updated )

CVE-2023-47489CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute ar…

7.8
First published (updated )

Combodo iTopiTop XSS vulnerability on pages/UI.php

8.8
First published (updated )

Combodo iTopiTop XSS vulnerability on pages/preferences.php

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopStored Cross-site Scripting in Combodo iTop

8.7
First published (updated )

Combodo iTopCode Injection in Combodo iTop

8.8
First published (updated )

Combodo iTopPossible Cross-Site Request Forgery in Combodo iTop

8.1
First published (updated )

Combodo iTopReflected XSS in Combodo/iTop

8.1
First published (updated )

Combodo iTopUnauthorized setup leads to SSRF in Combodo/iTop

8.7
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopNo CSRF form token cleanup on Windows servers

8.8
First published (updated )

Combodo iTopAny user can see any fields (including mailbox password) with GroupBy Dashlet

7.7
First published (updated )

Combodo iTopPortal : the CSRF token isn't validated

First published (updated )

Combodo iTopCommand Injection vulnerability in the Setup Wizard

8.8
First published (updated )

Combodo iTopInformation disclosure vulnerability in iTop

7.7
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopCombodo iTop - CSRF

8.8
First published (updated )

Combodo iTopCombodo iTop - Broken Access Control

7.5
First published (updated )

Combodo iTopCombodo iTop - Reflected XSS

7.4
First published (updated )

Combodo iTopCombodo iTop - Security Misconfiguration

7.5
First published (updated )

Combodo iTopXSS

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopiTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) v…

7.5
First published (updated )

Combodo iTopRace Condition, XSS

8.1
First published (updated )

Combodo TeemipCode Injection, Command Injection

7.2
First published (updated )

Combodo iTopCode Injection, Command Injection

7.2
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203