CVE-2024-8750

概要

参考情報

• incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-synetics-idoit-pro · Third Party Advisory

i-doit のその他の脆弱性

• CVE-2019-25582中 6.5i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipu…
• CVE-2019-25581高 7.5i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting…
• CVE-2024-8749高 7.5SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID …
• CVE-2023-46003中 5.4I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.
• CVE-2023-37756緊急 9.8I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are abl…