Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown
CVE-2023-48029
Disclosure Date: November 17, 2023 (last updated November 25, 2023)
Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer.
0
Attacker Value
Unknown
CVE-2023-3073
Disclosure Date: June 02, 2023 (last updated February 25, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
0
Attacker Value
Unknown
CVE-2023-3075
Disclosure Date: June 02, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
0
Attacker Value
Unknown
CVE-2023-3074
Disclosure Date: June 02, 2023 (last updated February 25, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
0
Attacker Value
Unknown
CVE-2023-3071
Disclosure Date: June 02, 2023 (last updated February 25, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
0
Attacker Value
Unknown
CVE-2023-3070
Disclosure Date: June 02, 2023 (last updated February 25, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
0
Attacker Value
Unknown
CVE-2023-3069
Disclosure Date: June 02, 2023 (last updated February 25, 2025)
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
0
Attacker Value
Unknown
CVE-2023-1527
Disclosure Date: March 21, 2023 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
0
Attacker Value
Unknown
CVE-2022-4446
Disclosure Date: December 13, 2022 (last updated February 24, 2025)
PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
0
Attacker Value
Unknown
CVE-2018-1000547
Disclosure Date: June 26, 2018 (last updated November 26, 2024)
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to. .
0
