黃榆翔

The issue is related to Broken Access Control in a function within Combodo iTop. This allows an unauthorized attacker to inject commands and disclose system information.

The issue concerns the lack of validation for inputted parameters, allowing attackers to inject malicious commands and initiate a cross-site scripting (XSS) attack. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

The issue is related to a stored Cross-site Scripting vulnerability. This can be exploited by uploading a file that contains a malicious script.

A security misconfiguration exists in Combodo iTop, which can expose sensitive information.

The issue is related to a cross-site request forgery (CSRF) vulnerability. This means that attackers can execute specific commands by forging requests from a malicious site.