Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
i-doit i-doit - vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-37755
i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vulnerability to obtain ...
I-doit I-doit
1 Github repository
NA
CVE-2023-37756
I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack.
I-doit I-doit
1 Github repository
NA
CVE-2023-34830
i-doit Open v24 exists to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter on the login page.
I-doit I-doit
1 Github repository
4.3
CVSSv2
CVE-2019-6965
An XSS issue exists in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.
I-doit I-doit 1.12
1 EDB exploit
6.5
CVSSv2
CVE-2018-20159
i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" ...
I-doit I-doit 1.11.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
server-side request forgery
CVE-2024-30067
CVE-2024-5553
CVE-2024-30095
IDOR
CVE-2024-35252
CVE-2024-23692
CVE-2024-27801
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2