Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-21786 1 Ibos 1 Ibos 2024-11-21 9.8 Critical
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php.
CVE-2020-21785 1 Ibos 1 Ibos 2024-11-21 8.8 High
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.
CVE-2020-21783 1 Ibos 1 Ibos 2024-11-21 6.1 Medium
In IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody[content] parameter.
CVE-2018-9130 1 Ibos 1 Ibos 2024-11-21 N/A
IBOS 4.4.3 has XSS via a company full name.