repository icon
tsolucio / corebos Project repository

core Business Operating System. An OPEN SOURCE business application that helps small and medium business handle all the day to day tasks.

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN26 DAYS

FIX

WITHIN34 DAYS

CSRS Delete list_Contacts
nam-no
pending
unauthicated users can see others's Photograph
lujiefsi
informative
Medium
Stored Cross site script in the name field
ayoub0x1
duplicate
High
Bypass change password policy
chucsse
High
•CVE-2023-3069
Stored XSS
chucsse
High
•CVE-2023-3070
Cross-site Scripting (XSS) - Stored in tsolucio/corebos
iohehe
High
•CVE-2023-3071
Bypass check length at Add Folder feature lead to XSS in module=evvtgendoc
kubozz
Medium
•CVE-2023-3073
Cross site scripting on contact module
ghostbit11
High
•CVE-2023-3074
Unauthenticated Remote Command Execution on corebos due to exposed install files...
c3l3si4n
Critical
•CVE-2022-4446
Reflected XSS of home module in tsolucio/corebos
christynorl
pending
Reflected XSS in home module of tsolucio/corebos
christynorl
self closed
Stored XSS via "subject" parameter in creating To Do task
saitamang
pending
Attacker can turn off 2FA of the Admin
7h3h4ckv157
High
•CVE-2023-3075
Bad Sanitization on "vtlib_purify" function leads to XSS
bugraesk
High
•CVE-2023-1527
Reflected XSS on "DetailViewAjax" via "relation_id" parameter
bugraesk
High
.htaccess file is exposed to public
e-r-r-o-r-404
informative
Medium
Reflected XSS via "stufftype" parameter
nerrorsec
High
Reflected XSS via "stuffid" parameter
nerrorsec
High
Reflected XSS via "idstring" parameter
nerrorsec
informative
High
Reflected XSS via "idlist" parameter
nerrorsec
High
Cross-Site Request Forgery (CSRF)
7h3h4ckv157
Medium
Path disclosure
j0x1nx
not applicable
no password policy
j0x1nx
informative
High
Reflected XSS in multiple parameters
nerrorsec
Medium
Stored XSS on Widget & HelpDesk Feature
apapedulimu
pending
Reflected XSS in "cbSurvey" module
jhond0e
Medium
Bypassing CSRF on Multiple Endpoint
apapedulimu
Medium
Reflected XSS on the Products Modules
apapedulimu
Low
Improper Preservation of Permissions
tharunavula
not applicable
Improper Access Control
tharunavula
not applicable
Improper Access Control
tharunavula
not applicable
Improper Access Control
tharunavula
not applicable
File attachment in document do not deleted and still be access by anyone
lekhang123lc
pending
Stored XSS via upload file
lekhang123lc
High
•$5
File Descriptor Leak
tharunavula
High
•$5
Improper Preservation of Permissions
tharunavula
High
•$5
Cross-Site Request Forgery (CSRF)
itsfading
Medium
•$5
Cross-site Scripting (XSS) - Reflected
itsfading
Medium
•$7
SQL Injection
itsfading
Critical
•$16
Cross-site Scripting (XSS) - Stored
itsfading
High
•$5
Business Logic Errors
dev696
Medium
•$10
Cross-site Scripting (XSS) - Stored
dev696
High
•$5
Cross-site Scripting (XSS) - Stored
aravindd007
Medium
•$5
Session Fixation
khanhchauminh
Medium
•$1
Cross-site Scripting (XSS) - Reflected
lovecppp
Medium
•$5
Cross-site Scripting (XSS) - Stored
khanhchauminh
High
•$5
Cross-site Scripting (XSS) - Stored
khanhchauminh
High
•$5
Cross-Site Request Forgery (CSRF)
khanhchauminh
Medium
•$5
Cross-site Scripting (XSS) - Stored
7h3h4ckv157
Medium
•$5
Out-of-bounds Write
7h3h4ckv157
Medium
•$10
Code Injection
7h3h4ckv157
Medium
•$1
Cross-site Scripting (XSS) - Stored
govindpalakkal
High
•$5
Cross-site Scripting (XSS) - Reflected
shellinjector
Medium
•$3
Cross-Site Request Forgery (CSRF)
am0o0
Low
•$5
PHP Remote File Inclusion
shellinjector
High
•$10
Session Fixation
am0o0
Low
•$25
Authorization Bypass Through User-Controlled Key
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Low
•$5
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-site Scripting (XSS) - Reflected
haxatron
Medium
•$25
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
0xamal
Medium
•$25
Cross-site Scripting (XSS) - Generic
noobpk
Medium
•$25
Cross-site Scripting (XSS) - Stored
noobpk
High
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$25