Filter
AND

Combodo iTopReflected Cross-site Scripting exploit in Combodo iTop

8.1
First published (updated )

Combodo iTopCross-Site Request Forgery (CSRF) in several iTop pages

8.8
First published (updated )

CVE-2023-47489CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute ar…

7.8
First published (updated )

Combodo iTopSSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop

8.8
First published (updated )

Combodo iTopUsers enumeration allowed through Rest API in Combodo iTop

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopCSRF security issue on CSV import in Combodo iTop

8.8
First published (updated )

Combodo iTopCross-site Scripting vulnerability in link CSV import in Combodo iTop

8.8
First published (updated )

Combodo iTopCross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop

8.8
First published (updated )

Combodo iTopCross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop

8.8
First published (updated )

Combodo iTopCross-site Scripting vulnerability in the run_query.php page in Combodo iTop

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopCombodo iTop - Broken Access Control

7.5
First published (updated )

Combodo iTopCombodo iTop - Reflected XSS

7.4
First published (updated )

Combodo iTopCombodo iTop - CSRF

8.8
First published (updated )

Combodo iTopiTop XSS vulnerability on pages/UI.php

8.8
First published (updated )

Combodo iTopiTop XSS vulnerability on pages/preferences.php

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopCode Injection, Command Injection

7.2
First published (updated )

Combodo iTopXSS

8.1
First published (updated )

Combodo iTopiTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) v…

7.5
First published (updated )

Combodo iTopRace Condition, XSS

8.1
First published (updated )

Combodo TeemipCode Injection, Command Injection

7.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopCombodo iTop - Security Misconfiguration

7.5
First published (updated )

Combodo iTopInformation disclosure vulnerability in iTop

7.7
First published (updated )

Combodo iTopPossible Cross-Site Request Forgery in Combodo iTop

8.1
First published (updated )

Combodo iTopAny user can see any fields (including mailbox password) with GroupBy Dashlet

7.7
First published (updated )

Combodo iTopNo CSRF form token cleanup on Windows servers

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Combodo iTopUnauthorized setup leads to SSRF in Combodo/iTop

8.7
First published (updated )

Combodo iTopReflected XSS in Combodo/iTop

8.1
First published (updated )

Combodo iTopPortal : the CSRF token isn't validated

First published (updated )

Combodo iTopCommand Injection vulnerability in the Setup Wizard

8.8
First published (updated )

Combodo iTopStored Cross-site Scripting in Combodo iTop

8.7
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203