Open Business Management
Approved changes feed: RSS · Atom
cpe:2.3:a:obm:open_business_management:*:rc13:*:*:*:*:*:*part: a version: * update: rc13
| Vendor | Obm (2da31808-f58c-55d7-8141-8146ea813303) |
|---|---|
| Product | Open Business Management (10dabba1-8edd-5a86-a9e9-57c2224047ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-5145 |
vulnerable | 2026-06-08 04:59:34.883910 |
Details available
Multiple SQL injection vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sel_domain_id or (2) action parameter to obm.php; (3) tf_user parameter in a search action to group/group_index.php; (4) tf_delegation, (5) tf_ip, (6) tf_name to host/host_index.php; or (7) lang, (8) theme, (9) cal_alert, (10) cal_first_hour, (11) cal_interval, (12) cal_last_hour, (13) commentorder, (14) csv_sep, (15) date, (16) date_upd, (17) debug_exe, (18) debug_id, (19) debug_param, (20) debug_sess, (21) debug_solr, (22) debug_sql, (23) dsrc, (24) menu, (25) rows, (26) sel_display_days, (27) timeformat, (28) timezone, or (29) todo parameter to settings/settings_index.php.
Published: 2012-08-31T21:00:00.000Z
Updated: 2024-08-07T00:30:44.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5144 |
vulnerable | 2026-06-08 04:59:34.883559 |
Details available
Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function.
Published: 2012-08-31T21:00:00.000Z
Updated: 2024-08-07T00:30:46.822Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5142 |
vulnerable | 2026-06-08 04:59:34.881868 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tf_delegation, (2) tf_ip, or (3) tf_name parameter in a search action to host/host_index.php; (4) login parameter to obm.php; or (5) tf_user parameter in a search action to group/group_index.php.
Published: 2012-08-31T21:00:00.000Z
Updated: 2024-08-07T00:23:40.208Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-5141 |
vulnerable | 2026-06-08 04:59:34.881444 |
Details available
Directory traversal vulnerability in exportcsv/exportcsv_index.php in Open Business Management (OBM) 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the module parameter in an export_page action.
Published: 2012-08-31T21:00:00.000Z
Updated: 2024-08-07T00:23:40.240Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.