Corebos

corebos

Vendor: Corebos • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-48029 1Corebos 1Corebos Jun 17, 2026 Nov 17, 2023 N/A· v4 8.0 HIGH· v3 N/A· v2 Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section,...Show more Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer.Show less
CVE-2023-3073 1Corebos 1Corebos Jun 17, 2026 Jun 2, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8 via evvtgendoc.
CVE-2023-3075 1Corebos 1Corebos Jun 17, 2026 Jun 2, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Cross-Site Request Forgery (CSRF) in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3074 1Corebos 1Corebos Jun 17, 2026 Jun 2, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3070 1Corebos 1Corebos Jun 17, 2026 Jun 2, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-3069 1Corebos 1Corebos Jun 17, 2026 Jun 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Unverified Password Change in GitHub repository tsolucio/corebos prior to 8.
CVE-2023-1527 1Corebos 1Corebos Jun 17, 2026 Mar 21, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.
CVE-2022-4446 1Corebos 1Corebos Jun 17, 2026 Dec 13, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
CVE-2018-1000547 1Corebos 1Corebos Nov 21, 2024 Jun 26, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 coreBOS version 7.0 and earlier contains a Incorrect Access Control vulnerability in Module: Contacts that can result in The error allows you to access records that you have no permissions to. .