Skip to content
OpenAdvisories

Vendor

I-Doit

3 known vulnerabilities.

Products

doit CMDB 2 i-doit Open Source CMDB 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2019-25581

    i-doit CMDB 1.12 SQL Injection via objGroupID Parameter

    i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the objGroupID parameter. Attackers can send GET requests with crafted SQL payloads in the objG…

    I-Doit doit CMDB
  • High 8.8
    CVE-2020-37078

    i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion

    i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated attackers to delete arbitrary files by manipulating the delete_import parameter. Attackers can send a POST request to the import module with a…

    I-Doit i-doit Open Source CMDB