📦 I Doit

CVE-2023-37756 allows attackers to brute-force administrator passwords in i-doit IT documentation software due to weak password requirements. This can lead to full system compromise through malicious ...

i-doit pro and open versions 25 and below have hardcoded default administrator credentials with no forced password change. Unauthenticated attackers can use these credentials to gain full administrato...

This SQL injection vulnerability in i-doit pro version 28 allows attackers to execute arbitrary SQL queries through the ID parameter in a specific API endpoint. Successful exploitation could lead to c...