Approved changes feed: RSS · Atom

cpe:2.3:a:ibos:oa:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbos (14329ccc-a2cc-5e21-b740-f1386345597c)
ProductOa (ff6df330-4bf2-5326-a891-1740dd7fc7ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4852 vulnerable 2026-06-08 06:16:14.728854 IBOS OA optimize sql injection
MEDIUM (6.3)
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239261 was assigned to this vulnerability.
Published: 2023-09-09T12:31:04.998Z
Updated: 2024-08-02T07:38:00.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4851 vulnerable 2026-06-08 06:16:14.728168 IBOS OA edit&op=member sql injection
MEDIUM (6.3)
A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239260.
Published: 2023-09-09T12:00:08.226Z
Updated: 2024-08-02T07:38:00.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4850 vulnerable 2026-06-08 06:16:14.727777 IBOS OA del sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239259.
Published: 2023-09-09T11:31:06.449Z
Updated: 2024-08-02T07:38:00.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4849 vulnerable 2026-06-08 06:16:14.727368 IBOS OA trash&op=del sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239258 is the identifier assigned to this vulnerability.
Published: 2023-09-09T10:31:05.725Z
Updated: 2024-09-26T14:59:00.276Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4742 vulnerable 2026-06-08 06:16:14.471969 IBOS OA export&uid=X sql injection
MEDIUM (6.3)
A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/user/export&uid=X. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238631. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-09-03T22:31:04.223Z
Updated: 2024-10-01T13:05:07.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4741 vulnerable 2026-06-08 06:16:14.469163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4740 vulnerable 2026-06-08 06:16:14.468600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4713 vulnerable 2026-06-08 06:16:14.423288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4545 vulnerable 2026-06-08 06:16:12.963017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4543 vulnerable 2026-06-08 06:16:12.960947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3826 vulnerable 2026-06-08 06:09:40.660059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3801 vulnerable 2026-06-08 06:09:40.570218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3799 vulnerable 2026-06-08 06:09:40.567549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3791 vulnerable 2026-06-08 06:09:40.554902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3621 vulnerable 2026-06-08 06:09:40.028199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3478 vulnerable 2026-06-08 06:09:39.705542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3449 vulnerable 2026-06-08 06:09:39.595186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.