IBOS records
29 published records for vendor ibos.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 3.4%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')22
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-459 Incomplete Cleanup1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
29 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2020-21786No exploit | In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php.ibos · ibos · CWE-434 | Critical9.8 | — | 1.1% | Jun 24, 2021 |
39Monitor | CVE-2023-4543No exploit | IBOS OA export&contactids=x sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.9% | Aug 25, 2023 |
39Monitor | CVE-2023-4545No exploit | IBOS OA export&checkids=x sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.8% | Aug 26, 2023 |
39Monitor | CVE-2023-2107No exploit | IBOS del&op=recycle sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Apr 15, 2023 |
39Monitor | CVE-2023-4850No exploit | IBOS OA del sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Sep 9, 2023 |
39Monitor | CVE-2023-4849No exploit | IBOS OA trash&op=del sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Sep 9, 2023 |
39Monitor | CVE-2023-4852No exploit | IBOS OA optimize sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Sep 9, 2023 |
39Monitor | CVE-2023-4851No exploit | IBOS OA edit&op=member sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Sep 9, 2023 |
39Monitor | CVE-2023-3799No exploit | IBOS OA Delete Category del sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Jul 20, 2023 |
39Monitor | CVE-2023-3100No exploit | IBOS del actionDel sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Jun 5, 2023 |
39Monitor | CVE-2023-1494No exploit | IBOS ApiController.php sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Mar 18, 2023 |
39Monitor | CVE-2023-3801No exploit | IBOS OA Mobile Notification edit actionEdit sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Jul 20, 2023 |
39Monitor | CVE-2023-3826No exploit | IBOS OA Interview edit&op=status sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.7% | Jul 22, 2023 |
39Monitor | CVE-2023-3791No exploit | IBOS OA Personal Office Address Book export actionExport sql injectionibos · ibos · CWE-89 | Critical9.8 | — | 0.6% | Jul 20, 2023 |
36Monitor | CVE-2020-21785No exploit | In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.ibos · ibos · CWE-77 | High8.8 | — | 2.7% | Jun 24, 2021 |
36Monitor | CVE-2024-28265No exploit | IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.ibos · ibos · CWE-459 | Critical9.1 | — | 0.5% | Nov 1, 2024 |
35Monitor | CVE-2023-4741Proof of concept | IBOS OA Delete Logs del sql injectionibos · ibos · CWE-89 | High8.8 | — | 0.9% | Sep 3, 2023 |
35Monitor | CVE-2023-1744No exploit | IBOS htaccess unrestricted uploadibos · ibos · CWE-434 | High8.8 | — | 0.9% | Mar 30, 2023 |
35Monitor | CVE-2023-4740No exploit | IBOS OA Delete Draft delDraft&archiveId=0 sql injectionibos · ibos · CWE-89 | High8.8 | — | 0.9% | Sep 3, 2023 |
35Monitor | CVE-2023-4742No exploit | IBOS OA export&uid=X sql injectionibos · ibos · CWE-89 | High8.8 | — | 0.8% | Sep 3, 2023 |
35Monitor | CVE-2023-4713No exploit | IBOS OA addcomment addComment sql injectionibos · ibos · CWE-89 | High8.8 | — | 0.8% | Sep 1, 2023 |
35Monitor | CVE-2023-3621No exploit | IBOS OA Delete Packet delete createDeleteCommand sql injectionibos · ibos · CWE-89 | High8.8 | — | 0.7% | Jul 11, 2023 |
35Monitor | CVE-2023-1742No exploit | IBOS Report Search getlist sql injectionibos · ibos · CWE-89 | High8.8 | — | 0.7% | Mar 30, 2023 |
35Monitor | CVE-2023-1747No exploit | IBOS mark&op=delFromSend sql injectionibos · ibos · CWE-89 | High8.8 | — | 0.7% | Mar 30, 2023 |
28Monitor | CVE-2023-3449No exploit | IBOS OA Interview Management Export export&interviews=x actionExport sql injectionibos · ibos · CWE-89 | High7.2 | — | 0.9% | Jun 28, 2023 |
- CVE-2020-2178639Monitor
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php.
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosJun 24, 2021
- CVE-2023-454339Monitor
IBOS OA export&contactids=x sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosAug 25, 2023
- CVE-2023-454539Monitor
IBOS OA export&checkids=x sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosAug 26, 2023
- CVE-2023-210739Monitor
IBOS del&op=recycle sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosApr 15, 2023
- CVE-2023-485039Monitor
IBOS OA del sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosSep 9, 2023
- CVE-2023-484939Monitor
IBOS OA trash&op=del sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosSep 9, 2023
- CVE-2023-485239Monitor
IBOS OA optimize sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosSep 9, 2023
- CVE-2023-485139Monitor
IBOS OA edit&op=member sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosSep 9, 2023
- CVE-2023-379939Monitor
IBOS OA Delete Category del sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosJul 20, 2023
- CVE-2023-310039Monitor
IBOS del actionDel sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosJun 5, 2023
- CVE-2023-149439Monitor
IBOS ApiController.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosMar 18, 2023
- CVE-2023-380139Monitor
IBOS OA Mobile Notification edit actionEdit sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosJul 20, 2023
- CVE-2023-382639Monitor
IBOS OA Interview edit&op=status sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosJul 22, 2023
- CVE-2023-379139Monitor
IBOS OA Personal Office Address Book export actionExport sql injection
CriticalCVSS 9.8No exploitEPSS 1%ibos · ibosJul 20, 2023
- CVE-2020-2178536Monitor
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.
HighCVSS 8.8No exploitEPSS 3%ibos · ibosJun 24, 2021
- CVE-2024-2826536Monitor
IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.
CriticalCVSS 9.1No exploitEPSS 0%ibos · ibosNov 1, 2024
- CVE-2023-474135Monitor
IBOS OA Delete Logs del sql injection
HighCVSS 8.8Proof of conceptEPSS 1%ibos · ibosSep 3, 2023
- CVE-2023-174435Monitor
IBOS htaccess unrestricted upload
HighCVSS 8.8No exploitEPSS 1%ibos · ibosMar 30, 2023
- CVE-2023-474035Monitor
IBOS OA Delete Draft delDraft&archiveId=0 sql injection
HighCVSS 8.8No exploitEPSS 1%ibos · ibosSep 3, 2023
- CVE-2023-474235Monitor
IBOS OA export&uid=X sql injection
HighCVSS 8.8No exploitEPSS 1%ibos · ibosSep 3, 2023
- CVE-2023-471335Monitor
IBOS OA addcomment addComment sql injection
HighCVSS 8.8No exploitEPSS 1%ibos · ibosSep 1, 2023
- CVE-2023-362135Monitor
IBOS OA Delete Packet delete createDeleteCommand sql injection
HighCVSS 8.8No exploitEPSS 1%ibos · ibosJul 11, 2023
- CVE-2023-174235Monitor
IBOS Report Search getlist sql injection
HighCVSS 8.8No exploitEPSS 1%ibos · ibosMar 30, 2023
- CVE-2023-174735Monitor
IBOS mark&op=delFromSend sql injection
HighCVSS 8.8No exploitEPSS 1%ibos · ibosMar 30, 2023
- CVE-2023-344928Monitor
IBOS OA Interview Management Export export&interviews=x actionExport sql injection
HighCVSS 7.2No exploitEPSS 1%ibos · ibosJun 28, 2023