Filtered by vendor Corebos Subscriptions
Total 9 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-48029 1 Corebos 1 Corebos 2024-08-29 8.0 High
Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer.
CVE-2018-1000547 1 Corebos 1 Corebos 2024-08-05 5.3 Medium
coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to. .
CVE-2022-4446 1 Corebos 1 Corebos 2024-08-03 9.8 Critical
PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
CVE-2023-3073 1 Corebos 1 Corebos 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
CVE-2023-3074 1 Corebos 1 Corebos 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3075 1 Corebos 1 Corebos 2024-08-02 6.5 Medium
Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3069 1 Corebos 1 Corebos 2024-08-02 9.8 Critical
Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3070 1 Corebos 1 Corebos 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-1527 1 Corebos 1 Corebos 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.