581 matches found
CVE-2019-14330: Improper Neutralization of Input During Web Page Generation
An issue was discovered in EspoCRM before 5.6.6. Stored XSS exists due to lack of filtration of user-supplied data in Create Case. A malicious attacker can modify the firstName and lastName to contain JavaScript code...
PT-2019-9285
Name of the Vulnerable Software and Affected Versions Creatiwity wityCMS version 0.6.2 Description A search for user discovery injection issue exists, allowing unfiltered input parameters. Specifically, the issue is accessible via the "Utilisateur" menu, affecting parameters such as Nickname,...
PHP Scripts Mall Entrepreneur B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Entrepreneur B2B Script is a suite of B2B e-commerce platforms from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Entrepreneur B2B Script version 3.0.6, which can be exploited by a remote attacker to inject arbitrary web script or HTML vi...
CVE-2018-20138: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541...
PT-2018-15266
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Entrepreneur B2B Script version 3.0.6 Description The issue allows for Stored XSS attacks through certain fields in the Account Settings, such as FirstName and LastName. This is similar to a previously identified issue...
CVE-2018-9283
An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...
CVE-2018-14396
An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...
Cross site scripting
An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...
CVE-2018-14396: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...
PT-2018-12487
Name of the Vulnerable Software and Affected Versions Creme CRM version 1.6.12 Description An issue was discovered in the salesman creation page, which is affected by stored cross-site scripting vulnerabilities. The vulnerable parameters include firstname, lastname, billing address-address, billi...
PT-2018-18959
Name of the Vulnerable Software and Affected Versions CremeCRM version 1.6.12 Description A stored Cross-Site Scripting XSS issue was found, affecting the contact creation and modification page. The issue is related to the firstname, lastname, billing address-address, billing address-zipcode,...
CVE-2018-9283: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...
Design/Logic Flaw
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...
CVE-2018-15182
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...
CVE-2018-15182
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...
PT-2018-12929
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script version 2.0.8 Description The issue allows for XSS via the FirstName and LastName fields. Recommendations For PHP Scripts Mall Car Rental Script version 2.0.8, consider validating and sanitizing user input fo...
CVE-2018-15182: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...
PHP Scripts Mall Auditor Website Cross-Site Scripting Vulnerability
PHP Scripts Mall Auditor Website is an accounting auditor website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Auditor Website version 2.0.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with th...
