Ibos

Ibos

29 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2024-28265

Exploit
  • EPSS 0.19%
  • Veröffentlicht 01.11.2024 16:15:08
  • Zuletzt bearbeitet 11.07.2025 13:58:20

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

9.8

CVE-2023-4852

Exploit
  • EPSS 0.05%
  • Veröffentlicht 09.09.2023 13:15:21
  • Zuletzt bearbeitet 21.11.2024 08:36:06

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit h...

9.8

CVE-2023-4851

Exploit
  • EPSS 0.04%
  • Veröffentlicht 09.09.2023 12:15:08
  • Zuletzt bearbeitet 21.11.2024 08:36:06

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The e...

9.8

CVE-2023-4850

Exploit
  • EPSS 0.05%
  • Veröffentlicht 09.09.2023 12:15:07
  • Zuletzt bearbeitet 21.11.2024 08:36:06

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

9.8

CVE-2023-4849

Exploit
  • EPSS 0.05%
  • Veröffentlicht 09.09.2023 11:15:14
  • Zuletzt bearbeitet 21.11.2024 08:36:06

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The att...

8.8

CVE-2023-4742

Exploit
  • EPSS 0.05%
  • Veröffentlicht 03.09.2023 23:15:39
  • Zuletzt bearbeitet 21.11.2024 08:35:52

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/user/export&uid=X. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit h...

8.8

CVE-2023-4741

Exploit
  • EPSS 0.14%
  • Veröffentlicht 03.09.2023 23:15:39
  • Zuletzt bearbeitet 21.11.2024 08:35:52

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be init...

8.8

CVE-2023-4740

Exploit
  • EPSS 0.06%
  • Veröffentlicht 03.09.2023 20:15:14
  • Zuletzt bearbeitet 21.11.2024 08:35:52

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible t...

8.8

CVE-2023-4713

Exploit
  • EPSS 0.05%
  • Veröffentlicht 01.09.2023 20:15:08
  • Zuletzt bearbeitet 21.11.2024 08:35:48

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function addComment of the file ?r=weibo/comment/addcomment. The manipulation of the argument touid leads to sql injection. The exploit has bee...

9.8

CVE-2023-4545

Exploit
  • EPSS 0.06%
  • Veröffentlicht 26.08.2023 07:15:10
  • Zuletzt bearbeitet 21.11.2024 08:35:23

A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the file ?r=recruit/bgchecks/export&checkids=x. The manipulation leads to sql injection. It is possible to launch the attack remotely. ...