CVE-2014-8330

CVE-2014-8330 is a cross-site scripting (XSS) flaw in EspoCRM. The vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the Name field when creating a new account. The provided documents do not specify exploit details or remediation patches.

PT-2014-8474

Name of the Vulnerable Software and Affected Versions EspoCRM affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the Name field in a new...

CVE-2014-8330: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EspoCRM allows remote authenticated users to inject arbitrary web script or HTML via the Name field in a new account...

Multiple vulnerabilities in EspoCRM

High-Tech Bridge Security Research Lab discovered multiple high-risk vulnerabilities in EspoCRM, which can be exploited by remote attacker to execute arbitrary PHP code on a vulnerable system, reinstall the application from scratch, and compromise the entire system as the result. EspoCRM is also...