Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Corebos HIGH 8.0
CVE-2023-48029

Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability…

Fix: after 8.0
Fix from $1,950 2023-11-17
Corebos MEDIUM 5.4
CVE-2023-3073

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.

Fix: 8.0+
Fix from $1,600 2023-06-02
Corebos MEDIUM 6.5
CVE-2023-3075

Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.

Fix: 8.0+
Fix from $1,600 2023-06-02
Corebos MEDIUM 5.4
CVE-2023-3074

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

Fix: 8.0+
Fix from $1,600 2023-06-02
Corebos CRITICAL 9.8
CVE-2023-3069

Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.

Fix: 8.0+
Fix from $2,300 2023-06-02
Corebos MEDIUM 5.4
CVE-2023-3070

Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.

Fix: 8.0+
Fix from $1,600 2023-06-02
Corebos MEDIUM 5.4
CVE-2023-1527

Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.

Fix: 8.0+
Fix from $1,600 2023-03-21
Corebos CRITICAL 9.8
CVE-2022-4446

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.

Fix: 8.0+
Fix from $2,300 2022-12-13
Corebos MEDIUM 5.3
CVE-2018-1000547

coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to acce…

Fix: after 7.0
Fix from $1,600 2018-06-26