Filter
AND

iTopiTop vulnerable to potential formula injection in Excel/CSV export file

First published (updated )

iTopiTop vulnerable to XSS vulnerability in authent-token

8.8
First published (updated )

iTopiTop vulnerable to XSS vulnerability in dashlet refresh

8.8
First published (updated )

iTopiTop vulnerable to XSS vulnerability in n:n relations "tagset" widget

8.7
First published (updated )

iTopReflected Cross-site Scripting exploit in Combodo iTop

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopCross-Site Request Forgery (CSRF) in several iTop pages

8.8
First published (updated )

iTopCombodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter

7.9
First published (updated )

iTopCSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute ar…

7.8
First published (updated )

iTopSSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop

8.8
First published (updated )

iTopLogic bug in ajax.render.php allows for bypass of 'backOffice' access control in Combodo iTop

7.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopCross-site Scripting in portal picture upload in Combodo iTop

7.1
First published (updated )

iTopUsers enumeration allowed through Rest API in Combodo iTop

7.5
First published (updated )

iTopCSRF security issue on CSV import in Combodo iTop

8.8
First published (updated )

iTopCross-site Scripting vulnerability in link CSV import in Combodo iTop

8.8
First published (updated )

iTopCross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopCross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop

8.8
First published (updated )

iTopCross-site Scripting vulnerability in the run_query.php page in Combodo iTop

8.8
First published (updated )

iTopCombodo iTop - Broken Access Control

7.5
First published (updated )

iTopCombodo iTop - Reflected XSS

7.4
First published (updated )

iTopCombodo iTop - CSRF

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopiTop XSS vulnerability on pages/UI.php

8.8
First published (updated )

iTopiTop XSS vulnerability on pages/preferences.php

8.8
First published (updated )

iTopCode Injection, Command Injection

7.2
First published (updated )

iTopXSS

8.1
First published (updated )

iTopiTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) v…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

iTopXSS, Race Condition

8.1
First published (updated )

Combodo TeemipCode Injection, Command Injection

7.2
First published (updated )

iTopCombodo iTop - Security Misconfiguration

7.5
First published (updated )

iTopInformation disclosure vulnerability in iTop

7.7
First published (updated )

iTopPossible Cross-Site Request Forgery in Combodo iTop

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203