IBOS 4.5.5

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibos:ibos:4.5.5:*:*:*:*:*:*:*

part: a version: 4.5.5 update: *

VendorIbos (14329ccc-a2cc-5e21-b740-f1386345597c)
ProductIbos (7b909cba-9b94-5a3a-9ceb-9736a954d75f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28265 vulnerable 2026-06-08 06:33:26.833501 Details available
IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.
Published: 2024-11-01T00:00:00.000Z
Updated: 2024-11-06T16:37:13.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4852 vulnerable 2026-06-08 06:16:14.728715 IBOS OA optimize sql injection
MEDIUM (6.3)
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239261 was assigned to this vulnerability.
Published: 2023-09-09T12:31:04.998Z
Updated: 2024-08-02T07:38:00.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4851 vulnerable 2026-06-08 06:16:14.728206 IBOS OA edit&op=member sql injection
MEDIUM (6.3)
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239260.
Published: 2023-09-09T12:00:08.226Z
Updated: 2024-08-02T07:38:00.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4850 vulnerable 2026-06-08 06:16:14.727809 IBOS OA del sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239259.
Published: 2023-09-09T11:31:06.449Z
Updated: 2024-08-02T07:38:00.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4849 vulnerable 2026-06-08 06:16:14.727325 IBOS OA trash&op=del sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239258 is the identifier assigned to this vulnerability.
Published: 2023-09-09T10:31:05.725Z
Updated: 2024-09-26T14:59:00.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4742 vulnerable 2026-06-08 06:16:14.472019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4741 vulnerable 2026-06-08 06:16:14.471348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4740 vulnerable 2026-06-08 06:16:14.468641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4713 vulnerable 2026-06-08 06:16:14.423334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4545 vulnerable 2026-06-08 06:16:12.963066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4543 vulnerable 2026-06-08 06:16:12.961883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3826 vulnerable 2026-06-08 06:09:40.660102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3801 vulnerable 2026-06-08 06:09:40.570342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3799 vulnerable 2026-06-08 06:09:40.567684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3791 vulnerable 2026-06-08 06:09:40.554940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3621 vulnerable 2026-06-08 06:09:40.028243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3478 vulnerable 2026-06-08 06:09:39.705675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3449 vulnerable 2026-06-08 06:09:39.595428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3100 vulnerable 2026-06-08 06:09:38.516299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2107 vulnerable 2026-06-08 06:02:41.430133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1494 vulnerable 2026-06-08 05:52:36.003436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.