CVE-2019-25581

概要

参考情報

• netcologne.dl.sourceforge.net/project/i-doit/i-doit/1.12/idoit-open-1.12.zip · Product
• exploit-db.com/exploits/46134 · Exploit
• i-doit.org · Product
• vulncheck.com/advisories/i-doit-cmdb-sql-injection-via-objgroupid-parameter · Third Party Advisory

i-doit のその他の脆弱性

• CVE-2019-25582中 6.5i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipu…
• CVE-2024-8750中 6.1Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an au…
• CVE-2024-8749高 7.5SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID …
• CVE-2023-46003中 5.4I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.
• CVE-2023-37756緊急 9.8I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are abl…