29 matches found
CVE-2022-37181
72crm 9.0 has an Arbitrary file upload vulnerability...
EUVD-2022-49414
Malicious code in bioql PyPI...
EUVD-2022-39834
Malicious code in bioql PyPI...
CVE-2022-46610
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-37178
An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar...
PT-2024-19646 · Wukongopensource +1 · Wukongopensource Wukongcrm +1
Name of the Vulnerable Software and Affected Versions: WuKongOpenSource WukongCRM version 72crm 9.0.1 20191202 Description: An issue in WuKongOpenSource WukongCRM allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component. Recommendations: For versio...
CVE-2022-46610
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
Privilege escalation
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-46610
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
72crm 代码问题漏洞
72crm is China's 72crm open source based on TP5.0 + ElementUI of a former CRMvueCRM system . 72crm v9 security vulnerabilities , the vulnerability stems from its avatar upload function allows the upload of arbitrary files resulting in an attacker can be carefully crafted PHP files to achieve...
CVE-2022-46610
CVE-2022-46610 affects 72crm v9. The issue is an arbitrary file upload via the avatar upload function, allowing execution of crafted PHP code. Underlying cause: improper handling of uploaded files in the avatar feature (no details on root cause beyond the description). Impact per sources: potenti...
CVE-2022-46610: Unrestricted Upload of File with Dangerous Type
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
PT-2023-14965 · 72Crm · 72Crm
Name of the Vulnerable Software and Affected Versions: 72crm version 9 Description: The issue is related to an arbitrary file upload vulnerability via the avatar upload function, allowing attackers to execute arbitrary code by uploading a crafted PHP file. Recommendations: For 72crm version 9,...
CVE-2022-46610
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-37178
An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar...
CVE-2022-37181
72crm 9.0 has an Arbitrary file upload vulnerability...
CVE-2022-37178
An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar...
CVE-2022-37181
72crm 9.0 has an Arbitrary file upload vulnerability...