20 matches found
1CRM-CVE
1CRM-CVE Vulnerabilidad de software 1CRM Lista de vulnerabilidades CVE-2019-14221: Cross Site Scripting almacenado...
EUVD-2019-5468
Malware in sbrugna...
EUVD-2020-7929
Malware in sbrugna...
CVE-2019-14221
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation...
CVE-2020-15958
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL...
Design/Logic Flaw
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL...
CVE-2020-15958
CVE-2020-15958 affects 1CRM System up to version 8.6.7. It exposes an insecure direct object reference to internally stored files, enabling an unauthenticated remote attacker to access sensitive information via a predictable URL. The advisory in PacketStorm (ARA-2020-005) cites CVSS v3 score 8.6 ...
CVE-2020-15958
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL...
CVE-2020-15958: Authorization Bypass Through User-Controlled Key
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenticated request with a predictable URL...
PT-2020-14738
Name of the Vulnerable Software and Affected Versions 1CRM System versions through 8.6.7 Description An issue allows a remote attacker to access sensitive information via an unauthenticated request with a predictable URL due to an insecure direct object reference to internally stored files...
CVE-2019-14221
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation...
Cross site scripting
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation...
CVE-2019-14221
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation...
CVE-2019-14221
1CRM On-Premise Software 8.5.7 is affected by a Cross-Site Scripting vulnerability triggered by a payload mishandled during a Run Report operation. The issue is described across CVE-2019-14221 entries (NVD, RH, CNVD, PRION) as XSS, with some references labeling it stored/persistent. Public disclo...
PT-2019-13541
Name of the Vulnerable Software and Affected Versions 1CRM On-Premise Software version 8.5.7 Description The issue allows for XSS due to a payload being mishandled during a Run Report operation. Recommendations For 1CRM On-Premise Software version 8.5.7, update to a version that includes a fix fo...
CVE-2019-14221: Improper Neutralization of Input During Web Page Generation
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation...
1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications 1CRM On-Premise Software 8.5.7 Stored XSS //////////////////////////////////////////////////////////////////////////////////// Exploit Title: 1CRM On-Premise Software 8.5.7 - Cross-Site Scripting Date: 19/07/2019 Exploit Author: Kusol...
1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
1CRM On-Premise Software 8.5.7 Stored XSS //////////////////////////////////////////////////////////////////////////////////// Exploit Title: 1CRM On-Premise Software 8.5.7 - Cross-Site Scripting Date: 19/07/2019 Exploit Author: Kusol Watchara-Apanukorn Vendor Homepage: https://1crm.com/ Version:...
1CRM On-Premise Software 8.5.7 Cross Site Scripting
1CRM On-Premise Software 8.5.7 Stored XSS //////////////////////////////////////////////////////////////////////////////////// Exploit Title: 1CRM On-Premise Software 8.5.7 - Cross-Site Scripting Date: 19/07/2019 Exploit Author: Kusol Watchara-Apanukorn Vendor Homepage: https://1crm.com/ Version:...
