390 matches found
SAP多个产品输入验证错误漏洞
SAP 3D Visual Enterprise Viewer is a 3D viewer, SAP ERP is a series of software for ERP management, SAP CRM is a customer relationship management system, Sap Crm Web Channel is an e-commerce management system. Sap Crm Web Channel is an e-commerce management system. An input validation error...
SAP ERP HCM 安全漏洞
SAP ERP HCM is an enterprise human resource management solution from SAP, Germany. A security vulnerability exists in SAP ERP HCM that can be exploited by attackers to compromise vulnerable systems, including Business Objects, SAP CRM Web Channel, SAP CRM, SAP ERP, NetWeaver, ASE...
SAP NetWeaver AS SQL注入漏洞
SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. SAP NetWeaver AS has a SQL injection vulnerability that can be exploited by attackers to threaten vulnerable systems, including Business Objects, SAP...
SAP 3D Visual Enterprise Viewer 输入验证错误漏洞
SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installations with standalone executables and ActiveX space. An input validation error vulnerability exis...
DayByDay CRM Security Bypass Vulnerability
DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. A security bypass vulnerability exists in DayByDay CRM, which can be exploited by an attacker to change any user's password and gain...
DayByDay CRM Cross-Site Scripting Vulnerability (CNVD-2022-68549)
DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. A cross-site scripting vulnerability exists in DayByDay CRM. The vulnerability stems from the title field of a new task in the product...
CVE-2022-22111
In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain access to the highest privileged use...
The vulnerability of the SAP Customer Relationship Management (CRM) system regarding customer relationship management, related to incorrect restrictions on the path to the restricted catalog, allows a perpetrator to execute arbitrary commands.
The vulnerability of the SAP Customer Relationship Management CRM system regarding customer relationship management is related to incorrect restrictions on the path to the restricted catalog. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary commands remotely...
Sourcecodester Customer Relationship Management System SQL Injection Vulnerability
Sourcecodester Customer Relationship Management System is an open source Php project. Sourcecodester Customer Relationship Management System CRM is vulnerable to SQL injection in v1.0, which can be exploited by attackers via the username field in "customer/login .php" in the username field to...
CVE-2021-43130
An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System CRM 1.0 via the username parameter in customer/login.php...
CVE-2021-43130
An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System CRM 1.0 via the username parameter in customer/login.php...
CVE-2021-43130
CVE-2021-43130 affects Sourcecodester Customer Relationship Management System (CRM) 1.0. The vulnerability is an SQL injection in the username parameter of the file path customer/login.php, caused by unsanitized input in the login flow. Per NVD, the CVSSv3.1 base score is 9.8 (CRITICAL) with netw...
Sourcecodester Customer Relationship Management System SQL注入漏洞
Sourcecodester Customer Relationship Management System is an open source Php project. Sourcecodester Customer Relationship Management System CRM is vulnerable to SQL injection in v1.0, which can be exploited by attackers via the username field in "customer/login .php" in the username field to...
Sourcecodester Customer Relationship Management System File Upload Vulnerability
Sourcecodester Customer Relationship Management System is an open source Php project by the individual developer Carlo Montero. Used to provide an online platform for companies to manage interactions with their customers or prospects. A file upload vulnerability exists in Sourcecodester Customer...
Sourcecodester Customer Relationship Management System Cross-Site Scripting Vulnerability
Sourcecodester Customer Relationship Management System is an open source Php project by Carlo Montero, an individual developer. Used to provide an online platform for companies to manage interactions with their customers or prospects. A cross-site scripting vulnerability exists in Sourcecodester...
SourceCodester Online Covid Vaccination Scheduler System SQL Injection Vulnerability
The SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. Efficiently manage COVID-19 vaccinations with a reliable vaccine scheduling and queue management solution. A SQL injection vulnerability exists in Sourcecodester Customer Relationship Manageme...
CVE-2021-37221
CVE-2021-37221 affects Sourcecodester Customer Relationship Management System 1.0. A file-upload flaw in the account update and customer-create paths could let a remote attacker upload an arbitrary PHP file, enabling code execution on the server. Public references include an exploit in Exploit-DB...
CVE-2021-37221
A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file...
Sourcecodester Customer Relationship Management System 跨站脚本漏洞
Sourcecodester Customer Relationship Management System is an open source Php project by Carlo Montero, an individual developer. Used to provide an online platform for companies to manage interactions with their customers or prospects. A cross-site scripting vulnerability exists in Sourcecodester...