CVE-2018-9283

An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...

CVE-2018-14396

An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...

Cross site scripting

An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...

PT-2018-18959

Name of the Vulnerable Software and Affected Versions CremeCRM version 1.6.12 Description A stored Cross-Site Scripting XSS issue was found, affecting the contact creation and modification page. The issue is related to the firstname, lastname, billing address-address, billing address-zipcode,...

PT-2018-12487

Name of the Vulnerable Software and Affected Versions Creme CRM version 1.6.12 Description An issue was discovered in the salesman creation page, which is affected by stored cross-site scripting vulnerabilities. The vulnerable parameters include firstname, lastname, billing address-address, billi...

CVE-2018-14396: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Creme CRM 1.6.12. The salesman creation page is affected by 10 stored cross-site scripting vulnerabilities involving the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address,...

CVE-2018-9283: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

Design/Logic Flaw

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

CVE-2018-15182

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

PT-2018-12929

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script version 2.0.8 Description The issue allows for XSS via the FirstName and LastName fields. Recommendations For PHP Scripts Mall Car Rental Script version 2.0.8, consider validating and sanitizing user input fo...

CVE-2018-15182: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields...

PHP Scripts Mall Auditor Website Cross-Site Scripting Vulnerability

PHP Scripts Mall Auditor Website is an accounting auditor website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Auditor Website version 2.0.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with th...

CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

CVE-2018-13256

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

PT-2018-11721

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Auditor Website version 2.0.1 Description The issue allows for XSS via the lastname or firstname parameter. Recommendations For PHP Scripts Mall Auditor Website version 2.0.1, update the software to a version that fixes this...

CVE-2018-13256: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter...

CVE-2017-9838

Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting XSS vulnerabilities in versions before 5.0.4: index.php leftmenu parameter, core/ajax/box.php PATHINFO, product/stats/card.php type parameter, holiday/list.php monthcreate, monthstart, and monthend parameters, and don/card.ph...

ncagr.gov XSS vulnerability

Vulnerable URL: http://www.ncagr.gov/aspzine/employeedirectory/dirsearch.asp?firstname=Justin=query%22%3E%3Cscript/src=%22http://xssposed.org/1.js%3Elol%3C/script%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability...