A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239260.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LIbos
APPIbos4.5.5
Related vulnerabilities
IBOS v4.5.5 — podatność umożliwiająca usunięcie dowolnego pliku
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronCon...
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.
A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is ...
A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of...