251 matches found
Group Office CRM Code Issue Vulnerability
Group Office CRM is a software application. Share projects, calendars, files and emails with colleagues and clients online. Easy to use and fully customizable. A code issue vulnerability exists in Group Office CRM that stems from the presence of a server-side request forgery SSRF vulnerability th...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
Cross site scripting
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
Intermesh BV Group Office 跨站脚本漏洞
Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A security vulnerability exists in Intermesh BV Group Office version 6.6.145. An attacker can exploit the vulnerability to elevate privileges and obtain sensitive information via the GOLANGUAGE cookie...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
PT-2023-20015 · Intermesh Bv · Group-Office
Name of the Vulnerable Software and Affected Versions: Intermesh BV Group-Office version 6.6.145 Description: The issue allows attackers to gain escalated privileges and gain sensitive information via the GO LANGUAGE cookie. This is a Reflected Cross Site Scripting XSS issue. Recommendations: For...
CVE-2023-25292
Group-Office (Intermesh BV) has a Reflected XSS in version 6.6.145 where the GO_LANGUAGE cookie can be manipulated to inject script, potentially exposing sensitive data and enabling privilege escalation. Root cause: improper handling/encoding of the GO_LANGUAGE cookie leads to reflected script in...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
Exploit for Cross-site Scripting in Group-Office Group_Office
CVE-2023-25292 Reflected Cross Site Scripting XSS in Interme...
Group Office CRM Server-Side Request Forgery Vulnerability
Group Office CRM is an enterprise CRM and component tool with email client, shared projects, calendar, documents and more. A server-side request forgery vulnerability exists in Group Office CRM version 6.4.196, which can be exploited by a remote attacker to forge a GET request to any URL via the...
Group Office CRM Cross-Site Scripting Vulnerability (CNVD-2021-29739)
Group Office CRM is a software application. Share projects, calendars, files and emails with colleagues and clients online. Easy to use and fully customizable. A cross-site scripting vulnerability exists in the Contacts page in Group Office CRM version 6.4.196. An attacker can exploit this...
Group Office CRM Cross-Site Scripting Vulnerability
Group Office CRM is a software application. Share projects, calendars, files and emails with colleagues and clients online. Easy to use and fully customizable. A cross-site scripting vulnerability exists in Group Office CRM version 6.4.196. An attacker can exploit this vulnerability via the...
CVE-2020-35419
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
CVE-2020-35419
Cross Site Scripting XSS in Group Office CRM 6.4.196 via the SETLANGUAGE parameter...
CVE-2021-28060
A Server-Side Request Forgery SSRF vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php...
CVE-2021-28060
A Server-Side Request Forgery SSRF vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php...
CVE-2020-35418
Cross Site Scripting XSS in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file...