28 matches found
EUVD-2023-43750
Malicious code in bioql PyPI...
EUVD-2023-57366
Malicious code in bioql PyPI...
CVE-2023-5020
A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/loginauth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack ma...
CVE-2023-3058
A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the publi...
07FLY CRM 跨站脚本漏洞
07FLY CRM is an OA office system of China Zero Takeoff 07FLY. A cross-site scripting vulnerability exists in 07FLY CRM version 1.3.8, which originates from the parameter Logi of the component System Settings Page that causes cross-site scripting...
CVE-2023-5020
A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/loginauth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack ma...
Sql injection
A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/loginauth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack ma...
CVE-2023-5020
CVE-2023-5020 describes a SQL injection in 07FLY CRM V2, affecting the Administrator Login Page at /index.php/sysmanage/Login/login_auth/ via the account parameter. The vulnerability can be exploited remotely and is rated critical/high across sources, with remote network access and no complexity/...
07FLY CRM SQL Injection Vulnerability
07FLY CRM is an OA office system of China Zero Takeoff 07FLY. A SQL injection vulnerability exists in 07FLY CRM version V2, which originates from a SQL injection vulnerability in the parameter account of the component Administrator Login Page...
PT-2023-31499 · Unknown · 07Fly Crm V2
Name of the Vulnerable Software and Affected Versions: 07FLY CRM V2 Description: A critical issue has been found in the Administrator Login Page component, specifically affecting the /index.php/sysmanage/Login/login auth/ file. The manipulation of the account argument leads to SQL injection. This...
CVE-2023-3058
A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the publi...
Cross site scripting
A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the publi...
CVE-2023-3058 07FLY CRM User Profile cross site scripting
A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the publi...
CVE-2023-3058 07FLY CRM User Profile cross site scripting
A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the publi...
CVE-2023-3058
CVE-2023-3058 affects 07FLY CRM up to version 1.2.0, with the vulnerable area in the User Profile Handler. The issue enables cross-site scripting and can be exploited remotely; exploits have been disclosed. Available sources indicate the patch status is unclear, and at least one reference recomme...
PT-2023-22798 · 07Flycrm · 07Flycrm
Name of the Vulnerable Software and Affected Versions: 07FLY CRM versions up to 1.2.0 Description: A vulnerability was found in the User Profile Handler component, which can be exploited to lead to cross site scripting. The attack can be initiated remotely. Recommendations: For 07FLY CRM versions...
07FLY-CRM Customer Relationship Management System suffers from SQL injection vulnerability (CNVD-2021-49593)
07FLY-CRM customer relationship management system is based on the GPLv3 agreement issued for small and medium-sized enterprise management activities , currently provides customer relationship manager CRM, sales and marketing inventory JXC, the software is open source and free of charge . 07FLY-CR...
07FLY-CRM Customer Relationship Management System suffers from SQL Injection Vulnerability
07FLY-CRM customer relationship management system is based on the GPLv3 agreement issued for small and medium-sized management activities , currently provides customer relationship manager CRM, sales and marketing inventory JXC, the software is open-source and free of charge , in order to create...
07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46886)
07FLY-CRM is a domestic open source general-purpose customer management system . 07FLY-CRM has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...
07FLY-CRM Customer Management System v1.2 suffers from SQL injection vulnerability (CNVD-2021-46818)
07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM customer management system v1.2 SQL injection vulnerability , attackers can exploit the vulnerability to obtain...