58 matches found
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-54687: Improper Neutralization of Input During Web Page Generation
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
PT-2025-3062
Name of the Vulnerable Software and Affected Versions Vtiger CRM versions 6.1 and earlier Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the Documents module and the function uploadAndSaveFile in CRMEntity.php. Recommendations For versions 6.1 and...
Vtiger CRM security vulnerabilities
Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM v.6.1 and earlier versions, which stems...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-54687
Vtiger CRM versions 6.1 and earlier are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw exists within the Documents module , specifically in the uploadAndSaveFile function located in CRMEntity.php. This vulnerability allows for the execution of malicious scripts in the context ...
CVE-2024-54687
Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting XSS via the Documents module and function uploadAndSaveFile in CRMEntity.php...
CVE-2024-53619
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
UBUNTU-CVE-2024-53619
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
SPIP security vulnerabilities
SPIP is a free software for creating Internet sites from the SPIP open source. A security vulnerability exists in SPIP v4.3.3, which originates from an authenticated arbitrary file upload vulnerability in the Documents module...
PT-2024-35793 · Spip · Spip
Name of the Vulnerable Software and Affected Versions: SPIP version 4.3.3 Description: The issue concerns an authenticated arbitrary file upload vulnerability in the Documents module. This allows attackers to execute arbitrary code by uploading a crafted PDF file. There is no information provided...
CVE-2024-53619: Unrestricted Upload of File with Dangerous Type
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
CVE-2024-53619
An authenticated arbitrary file upload vulnerability exists in the Documents module of SPIP v4.3.3 . This flaw allows an authenticated attacker to execute arbitrary code by uploading a specially crafted PDF file . No specific patch version is currently provided; however, it is recommended to disa...
CVE-2024-53619
An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file...
BIT-SUITECRM-2020-15300
SuiteCRM through 7.11.13 has an Open Redirect in the Documents module via a crafted SVG document...
ABO.CMS Documents Code Execution
The vulnerability of the Documents module in the ABO.CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2023-46953
SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents module...
