Skip to content
OpenAdvisories

Vendor

ITPison

11 known vulnerabilities.

Products

OMICARD EDM 7 OMICARD EDM 's SMS 3 Contact ITPison 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-10597

    ITPison｜OMICARD EDM - Insecure Direct Object Reference

    OMICARD EDM developed by ITPison has a Insecure Direct Object Reference vulnerability, allowing unauthenticated remote attackers to modify a specific parameter to obtain user's email address.

    ITPison OMICARD EDM
  • Medium 5.3
    CVE-2024-4894

    ITPison OMICARD EDM - Server-Side Request Forgery

    ITPison OMICARD EDM fails to properly filter specific URL parameter, allowing unauthenticated remote attackers to modify the parameters and conduct Server-Side Request Forgery (SSRF) attacks. This vulnerability enables attackers to probe internal network info…

    ITPison OMICARD EDM
  • Medium 6.8
    CVE-2023-28700

    ITPison OMICARD EDM - Arbitrary File Upload

    OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbit…

    ITPison OMICARD EDM