1.1.181

DATE	CVE	VULNERABILITY TITLE	RISK
2018-05-02	CVE-2018-10642	Code Injection vulnerability in Combodo Itop Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval(). network low complexity combodo CWE-94	7.2
2018-02-20	CVE-2015-6544	Cross-site Scripting vulnerability in Combodo Itop Cross-site scripting (XSS) vulnerability in application/dashboard.class.inc.php in Combodo iTop before 2.2.0-2459 allows remote attackers to inject arbitrary web script or HTML via a dashboard title. network low complexity combodo CWE-79	6.1