Skip to content
OpenAdvisories

Vendor

itflow-org

3 known vulnerabilities.

Products

itflow 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-54597 Public exploit

    ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter

    ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with module_support write permission and access to a credential record can perform time-based blind SQL inj…

    itflow-org itflow
  • High 8.1
    CVE-2026-54596 Public exploit

    ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration

    ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician or higher with access to at least one client invoice can inject SQL through the frequency parameter h…

    itflow-org itflow