Go2ismail vulnerabilities
We track 6 vulnerabilities in Go2ismail products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
Latest Go2ismail vulnerabilities
- 9.8 Critical severity
Asp.Net-Core-Inventory-Order-Management-System: Use of Default Credentials
INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because UserAdminSeeder creates [email protected] with password 123456. Attackers can log in with these credentials,
- 9.8 Critical severity
Asp.Net-Core-Inventory-Order-Management-System: Use of Hard-coded Cryptographic Key
INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge toke
- 8.8 High severity
Free-CRM: Incorrect Privilege Assignment
A vulnerability was identified in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. This affects an unknown part of the file /api/Security/ of the component Security API. The manipulation leads to improper authorization. The attack is possible
- 8.8 High severity
Free-CRM: Execution After Redirect (EAR)
A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Affected by this issue is some unknown functionality of the component Administrative Interface. Executing a manipulation can lead to execution after redirect.
- 8.8 High severity
Asp.Net-Core-Inventory-Order-Management-System: Incorrect Privilege Assignment
A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in im
- 8.8 High severity
Asp.Net-Core-Inventory-Order-Management-System: Execution After Redirect (EAR)
A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launc