Itflow-org vulnerabilities
We track 2 vulnerabilities in Itflow-org products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Itflow-org vulnerabilities
- 8.3 High severity
itflow: Improper Neutralization of Special Elements used in an SQL Command
ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with module_support write permission and access to a credential record can perform time-based blind SQL inje
- 8.1 High severity
itflow: Improper Neutralization of Special Elements used in an SQL Command
ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician or higher with access to at least one client invoice can inject SQL through the frequency parameter ha