390 matches found
CVE-2023-34548
CVE-2023-34548 affects Simple Customer Relationship Management 1.0. The vulnerability is an SQL Injection exposed via the email parameter in the application, with CVSS v3.1 metrics showing a CRITICAL base score (9.8), network attack vector, no privileges, and high impact on confidentiality, integ...
Simple Customer Relationship Management SQL注入漏洞
Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero Personal Developer. A security vulnerability exists in the Simple Customer Relationship Management CRM System, which stems from an email parameter that could lead to an SQL...
PT-2023-24916 · Unknown · Simple Customer Relationship Management System
Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management version 1.0 Description: The issue allows for SQL Injection via the email parameter. Recommendations: For version 1.0, avoid using the email parameter in affected API endpoints until the issue is...
CVE-2023-34548
Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter...
Vulnerabilities fixed in SAP
SAP has fixed vulnerabilities in several products, including NetWeaver, CRM and SAPUI5. A malicious person could exploit them to carry out attacks that can lead to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Bypassing authentication SQL Injection SAP has...
PT-2023-3745 · Sap · Sap Crm Abap
Name of the Vulnerable Software and Affected Versions: SAP CRM ABAP Grantor Management versions 700 through 714 Description: The issue arises from insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by a remote...
The vulnerability of the user interface of the SAP CRM WebClient UI, which allows an attacker to perform XSS attacks.
The vulnerability of the SAP CRM WebClient UI user interface lies in the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows an attacker to execute XSS attacks remotely...
Odoo Access Control Issue Vulnerability
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. An access control...
SAP CRM 跨站脚本漏洞
SAP CRM is a customer relationship management system from SAP, a German company. A cross-site scripting vulnerability exists in SAP CRM that stems from not adequately coding user-controlled input...
SAP CRM 跨站脚本漏洞
SAP CRM is a customer relationship management system from SAP, a German company. A cross-site scripting vulnerability exists in the SAP CRM WebClient UI that stems from not adequately coding user-controlled input. An attacker exploiting the vulnerability could read and modify some sensitive...
SAP CRM 安全漏洞
SAP CRM is a customer relationship management system from SAP, Germany. A security vulnerability exists in SAP CRM WebClient UI that originates from a vulnerability that allows an attacker to modify the HTTP verbs used in a request via a web server, which could lead to the exposure of form fields...
SAP CRM 代码注入漏洞
SAP CRM is a customer relationship management system from SAP, a German company. A code injection vulnerability exists in SAP CRM versions 700, 701, 702, 712, and 713. An attacker could exploit this vulnerability to compromise the confidentiality and integrity of data and availability...
CVE-2023-24655
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...
CVE-2023-24655
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...
CVE-2023-24655
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...
PT-2023-19728 · Unknown · Simple Customer Relationship Management System
Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: A SQL injection issue was found in the Profile Update function, specifically via the name parameter. Recommendations: For Simple Customer Relationship Management System...
CVE-2023-24655
CVE-2023-24655 affects Simple Customer Relationship Management System v1.0. A SQL injection flaw exists in the Profile Update function via the name parameter, enabling potentially arbitrary SQL execution. The CVSS 3.1 vector indicates a network attack with no user interaction and requires no priv...
Simple Customer Relationship Management SQL注入漏洞
Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Simple Customer Relationship Management System v1.0, which can be exploited to perform SQL injection via the name...
