Filter
AND
Software
iTopCombodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter
7.9
First published (updated )
iTopReflected Cross-site Scripting exploit in Combodo iTop
8.1
First published (updated )
iTopCross-Site Request Forgery (CSRF) in several iTop pages
8.8
First published (updated )
iTopCross-site Scripting in portal picture upload in Combodo iTop
7.1
First published (updated )
iTopLogic bug in ajax.render.php allows for bypass of 'backOffice' access control in Combodo iTop
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
iTopSSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop
8.8
First published (updated )
iTopUsers enumeration allowed through Rest API in Combodo iTop
7.5
First published (updated )
iTopCSRF security issue on CSV import in Combodo iTop
8.8
First published (updated )
iTopCross-site Scripting vulnerability in link CSV import in Combodo iTop
8.8
First published (updated )
iTopCross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
iTopCross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop
8.8
First published (updated )
iTopCross-site Scripting vulnerability in the run_query.php page in Combodo iTop
8.8
First published (updated )
iTopiTop vulnerable to potential formula injection in Excel/CSV export file
8
First published (updated )
iTopiTop vulnerable to XSS vulnerability in authent-token
8.8
First published (updated )
iTopiTop vulnerable to XSS vulnerability in dashlet refresh
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
iTopiTop vulnerable to XSS vulnerability in n:n relations "tagset" widget
8.7
First published (updated )
iTopCSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute ar…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
iTopPossible Cross-Site Request Forgery in Combodo iTop
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
iTopAny user can see any fields (including mailbox password) with GroupBy Dashlet
7.7
First published (updated )
iTopCommand Injection vulnerability in the Setup Wizard
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.