15 matches found
SQL Injection
Overview krayin/laravel-crm is a hand tailored CRM framework built on some of the hottest opensource technologies such as Laravel a PHP framework and Vue.js a progressive Javascript framework. Affected versions of this package are vulnerable to SQL Injection via the rottenlead parameter in...
CVE-2026-41453
creationtimestamp| type| source ---|---|--- 2026-08-03 17:50:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7iwzrmzosnkxj 2026-08-04 06:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadq2mz572l...
CVE-2026-41453 Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter
Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject arbitrary SQL into a HAVING clause by manipulating the rottenleadin query parameter, which is concatenated without parameterized binding directly...
CVE-2024-41453
A cross-site scripting XSS vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
CVE-2024-41453
creationtimestamp| type| source ---|---|--- 2025-01-15 23:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsvhmaovh2b 2025-01-15 23:54:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1902 2025-01-16 00:03:31+00:00| seen|...
CVE-2024-41453
A cross-site scripting XSS vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
CVE-2024-41453
A cross-site scripting XSS vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
CVE-2024-41453
A cross-site scripting (XSS) vulnerability exists in ProcessMaker pm4core-docker 4.1.21-RC7 . The root cause is a lack of user input sanitization in the import function, specifically when handling the Name parameter . An attacker can craft a malicious JSON file containing an XSS payload and trick...
CVE-2024-41453
A cross-site scripting XSS vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...
CVE-2023-41453
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component...
CVE-2023-41453
CVE-2023-41453 concerns a Cross-Site Scripting vulnerability in phpkobo AjaxNewTicker v1.0.5. The issue arises from an exploitable vulnerability in the cmd parameter of the file index.php, enabling a remote attacker to supply a crafted payload that results in arbitrary code execution through XSS....
CVE-2021-41453
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2021-41453
The CVE-2021-41453 entry is rejected/not used as stated in the initial description.
werk.nl XSS vulnerability
Vulnerable URL: https://www.werk.nl/werknl/werknemer/zoeken?sitesearch=1zqjntx" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 41453 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value...