CRITICAL🇵🇱 Wersja polska

CVE-2024-28265

CVSS 9.1v3.1pub. 2024-11-01upd. 2025-07-11

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Ibos

    APP
    Ibos
    4.5.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-21786CRITICAL9.8ten sam produkt

In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronCon...

CVE-2020-21785HIGH8.8ten sam produkt

In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.

CVE-2023-4850MEDIUM6.3ten sam produkt

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of...

CVE-2023-4849MEDIUM6.3ten sam produkt

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is ...

CVE-2023-4851MEDIUM6.3ten sam produkt

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown...