CVE-2020-17372

SugarCRM before 10.1.0 Q3 2020 allows XSS...

MSC-2024-17372

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

CVE-2017-17372

CVE-2017-17372 is rejected/not used per initial description; does not represent an active vulnerability entry.

CVE-2017-17372

...

CVE-2020-17372

SugarCRM before 10.1.0 Q3 2020 allows XSS...

CVE-2020-17372

SugarCRM prior to 10.1.0 (Q3 2020) is affected by reflected XSS vulnerabilities due to insufficient validation of client-side input. Exploitable via multiple vectors (e.g., do= metadata and current_step in Reports), allowing injected script execution in a victim’s browser. Affected versions: Suga...

SugarCRM Cross Site Scripting

SugarCRM 10.1.0 Multiple Reflected Cross-Site Scripting Vulnerabilities • Software Link: https://www.sugarcrm.com/ • Affected Versions: All versions prior to 10.1.0 Q3 2020. • Vulnerabilities Description: 1 User input passed through the “do” parameter when action is set to “metadata” is not...

CVE-2019-17372

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNUaccessPasswordrecovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D,...

CVE-2019-17372

CVE-2019-17372 affects multiple NETGEAR consumer routers (e.g., AC1450, D8500, R4500, R6300/R6300v2, R7000/R7000P, WNR3500L, WNDR4500/v2, WNDR4000, WNDR4500v2, WNR1000/v3, etc.). The underlying issue is an authentication bypass that allows remote attackers to disable all authentication by visitin...