Corebos

9 CVEs across 1 Corebos products. Browse Corebos vulnerabilities, severities, and proof-of-concept exploits.

Corebos products with known CVEs

ProductCVEs
Corebos9
Corebos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-48029High8.02023-11-17Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploi…
CVE-2023-3073Medium5.42023-06-02Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
CVE-2023-3075Medium6.52023-06-02Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3074Medium5.42023-06-02Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3070Medium5.42023-06-02Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3069Critical9.82023-06-02Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-1527Medium5.42023-03-21Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
CVE-2022-4446Critical9.82022-12-13PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
CVE-2018-1000547Medium5.32018-06-26coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records…