IBOS vulnerabilities
We track 23 vulnerabilities in IBOS products across 2 products. 23 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2023.
Latest IBOS vulnerabilities
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been di
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been dis
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be
- 8.8 High severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/user/export&uid=X. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been di
- 8.8 High severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be initiated remo
- 8.8 High severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible to initiate
- 8.8 High severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function addComment of the file ?r=weibo/comment/addcomment. The manipulation of the argument touid leads to sql injection. The exploit has been disclose
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the file ?r=recruit/bgchecks/export&checkids=x. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploi
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. This vulnerability affects unknown code of the file ?r=recruit/contact/export&contactids=x. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid l
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. Affected by this vulnerability is the function actionEdit of the file ?r=officialdoc/officialdoc/edit of the component Mobile Notification Handler. The manipulation leads to sql inje
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=article/category/del of the component Delete Category Handler. The manipulation leads to sql injection. The attack may be initiated
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. Affected by this issue is the function actionExport of the file ?r=contact/default/export of the component Personal Office Address Book. The manipulation leads to sql injection. The attack
- 8.8 High severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is the function createDeleteCommand of the file ?r=article/default/delete of the component Delete Packet. The manipulation leads to sql injection. It is possible to launch
- 7.2 High severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in IBOS OA 4.5.5. Affected by this vulnerability is the function actionEdit of the file ?r=dashboard/roleadmin/edit&op=member of the component Add User Handler. The manipulation of the argument id leads to sql i
- 7.2 High severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/interview/export&interviews=x of the component Interview Management Export. The manipulation of the argument
- 9.8 Critical severity
IBOS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function actionDel of the file ?r=dashboard/approval/del. The manipulation of the argument id leads to sql injection. The exploit has been disclosed
- 9.8 Critical severity
IBOS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in IBOS 4.5.5. Affected is an unknown function of the file file/personal/del&op=recycle. The manipulation of the argument fids leads to sql injection. It is possible to launch the attack remotely. Th
- 8.8 High severity
IBOS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in IBOS up to 4.5.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=email/api/mark&op=delFromSend. The manipulation of the argument emailids leads to sql injection. The attac
- 8.8 High severity
IBOS: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component htaccess Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to th
- 8.8 High severity
IBOS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?r=report/api/getlist of the component Report Search. The manipulation leads to sql injection. The attack may be launched
- 9.8 Critical severity
IBOS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has