I-doit vulnerabilities

Products

• I-doit 19
• Doit Cmdb 2

Newest

• i-doit doit cmdb, i-doit +1 more i-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter CVE-2019-25582 7.1 HighMarch 21, 2026
• i-doit doit cmdb, i-doit +1 more i-doit CMDB 1.12 SQL Injection via objGroupID Parameter CVE-2019-25581 8.8 HighMarch 21, 2026
• synetics idoit pro, i-doit +1 more Cross-site Scripting vulnerability in Idoit pro CVE-2024-8750 5.4 MediumSeptember 12, 2024
• synetics idoit pro, i-doit +1 more SQL Injection vulnerability in Idoit pro CVE-2024-8749 8.8 HighSeptember 12, 2024
• i-doit I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php. CVE-2023-46003 Public exploit 5.4 MediumOctober 21, 2023
• i-doit I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for... CVE-2023-37756 Public exploit 9.8 CriticalSeptember 14, 2023
• i-doit i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default... CVE-2023-37755 Public exploit 9.8 CriticalSeptember 14, 2023
• i-doit i-doit Pro v25 and below was discovered to be vulnerable to path traversal. CVE-2023-37739 Public exploit 6.5 MediumSeptember 14, 2023
• i-doit i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2023-34830 Public exploit 5.4 MediumJune 27, 2023
• i-doit i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow... CVE-2021-3151 5.4 MediumFebruary 27, 2021
• i-doit A cross-site scripting (XSS) vulnerability in i-doit 1.14.2 allows remote attackers to inject... CVE-2020-13825 6.1 MediumAugust 19, 2020
• i-doit A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an... CVE-2020-13826 8.8 HighAugust 19, 2020
• i-doit Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is:... CVE-2019-1010248 9.8 CriticalJuly 18, 2019
• i-doit An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter. CVE-2019-6965 Public exploit 6.1 MediumJune 18, 2019
• i-doit i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an... CVE-2018-20159 Public exploit 7.2 HighDecember 15, 2018
• i-doit Cross-site scripting (XSS) vulnerability in the API in synetics i-doit pro before 1.2.5 allows... CVE-2014-2231 4.3 MediumFebruary 27, 2014
• i-doit SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i... CVE-2014-1597 Public exploit 7.5 HighFebruary 27, 2014
• i-doit Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote... CVE-2014-1237 4.3 MediumFebruary 11, 2014
• i-doit Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1... CVE-2013-1413 4.3 MediumFebruary 11, 2014