Combodo iTop (aka IT Operations Portal)

Combodo iTop's weak password reset token leads to account takeover

iTop limit pages/exec.php script to PHP files

Authenticated users of Combodo iTop can take over any account

Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter

Cross-site Scripting in Combodo iTop

XSS in csvimport in 3.0.0-beta versions

Code Injection in Combodo iTop

Command Injection vulnerability in the Setup Wizard

iTop XSS vulnerability on pages/UI.php

Cross-Site Request Forgery (CSRF) in several iTop pages

SSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop

iTop XSS vulnerability on pages/preferences.php

Combodo iTop - CSRF

iTop vulnerable to XSS vulnerability in dashlet refresh

iTop vulnerable to XSS vulnerability in authent-token

No CSRF form token cleanup on Windows servers

Cross-site Scripting vulnerability in link CSV import in Combodo iTop

Cross-site Scripting vulnerability in the run_query.php page in Combodo iTop

Cross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop

Cross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop

CSRF security issue on CSV import in Combodo iTop

Combodo iTop vulnerable to reflected XSS via objection edition form error

Combodo iTop vulnerable to reflected XSS in ajax.render.php render_dashboard

Combodo iTop has XSS vulnerability in /pages/ajax.render.php

Unauthorized setup leads to SSRF in Combodo/iTop

Stored Cross-site Scripting in Combodo iTop

iTop vulnerable to XSS vulnerability in n:n relations "tagset" widget

iTop admin can drop iTop database using webhooks

Combodo iTop vulnerable to Remote Code Execution in the backup creation functionality

iTop server vulnerable to portal code injection

Combodo iTop has stored XSS in user portal's browse brick

A post-authentication privilege escalation in the web application of Combodo iTop allows regular authenticated users to access information and modify information with administrative privileges by not following the HTTP Location header in server responses. This is fixed in all iTop packages (community, essential, professional) in versions : 2.5.4, 2.6.3, 2.7.0

In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be accomplished by calling ajax.dataloader with a maliciously crafted payload. Many conditions can place the configuration file into a writable state: during installation; during upgrade; in certain cases, an error during modification of the file from the web interface leaves the file writable (can be triggered with XSS); a race condition can be triggered by the hub-connector module (community version only from 2.4.1 to 2.6.0); or editing the file in a CLI.

Reflected XSS in Combodo/iTop

Possible Cross-Site Request Forgery in Combodo iTop

Reflected Cross-site Scripting exploit in Combodo iTop

iTop vulnerable to potential formula injection in Excel/CSV export file

Portal : the CSRF token isn't validated

CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components.

Information disclosure vulnerability in iTop