itflow vulnerabilities

2 known vulnerabilities in itflow from Itflow-org. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  itflow: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-54597Sep 17, 2026Itflow-org

  ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with module_support write permission and access to a credential record can perform time-based blind SQL inje

• 8.1 High severity

  itflow: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-54596Sep 17, 2026Itflow-org

  ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician or higher with access to at least one client invoice can inject SQL through the frequency parameter ha