CVE-2025-60375

CVE-2025-60375 CVE-2025-60375 — Обход аутентификации / некорректное управление доступом в PerfexCRM...

CVE-2025-60375

CVE-2025-60375 — PerfexCRM 인증 우회 Advisory ID: perfexcrm-auth-bypass-2025 CVE: CVE-2025-60375 제품: PerfexCRM 영향을 받는 버전: 3.3.1 이전 버전 참고: 이는 분류를 위한 추정 벡터입니다. 조정된 공개 후 정확한 CVSS 벡터를 제공하십시오. 연락처 / 크레딧 보고자: Ajansha Sh...

CVE-2025-55903

CVE-2025-55903: PerfexCRM 저장형 HTML 인젝션Stored HTML Injection ⚠️ 보안 권고 인보이스, 청구 및 자동 커뮤니케이션에 영향을 미치는 치명적인 저장형 HTML 인젝션 취약점 -ff6600 📋 개요 PerfexCRM에서 인증된 사용자가 인보이스 설명, 청구 주소 및 고객 메모에 악성 HTML을 주입할 수 있는 저장형 HTML 인젝션 취약점이 발견되었습니다. 주입된 콘텐츠는 데이터베이스에 영구 저장되며 고객 대상 이메일 및 PDF 첨부 파일에 자동으로 렌더링되어 대규모 피싱 공격, 비즈니스...

📄 PerfexCRM Authentication Bypass

PerfexCRM versions prior to 3.3.1 suffer from an authentication bypass vulnerability. Security Advisory — PerfexCRM Authentication Bypass CVE-2025-60375, RESERVED Advisory ID: perfexcrm-auth-bypass-2025 CVE: CVE-2025-60375 RESERVED Product: PerfexCRM Affected versions: versions prior to 3.3.1 3.3...

perfexcrm 1.10 - 'State' Stored Cross-site scripting (XSS)

Exploit Title: perfexcrm 1.10 - 'State' Stored Cross-site scripting XSS Date: 05/07/2021 Exploit Author: Alhasan Abbas exploit.msf Vendor Homepage: https://www.perfexcrm.com/ Version: 1.10 Tested on: windows 10 Vunlerable page: /clients/profile POC: ---- POST /clients/profile HTTP/1.1 Host:...

perfexcrm 1.10 Cross Site Scripting

Exploit Title: perfexcrm 1.10 - 'State' Stored Cross-site scripting XSS Date: 05/07/2021 Exploit Author: Alhasan Abbas exploit.msf Vendor Homepage: https://www.perfexcrm.com/ Version: 1.10 Tested on: windows 10 Vunlerable page: /clients/profile POC: ---- POST /clients/profile HTTP/1.1 Host:...

perfexcrm 1.10 - (State) Stored Cross-site scripting Vulnerability

Exploit Title: perfexcrm 1.10 - 'State' Stored Cross-site scripting XSS Exploit Author: Alhasan Abbas exploit.msf Vendor Homepage: https://www.perfexcrm.com/ Version: 1.10 Tested on: windows 10 Vunlerable page: /clients/profile POC: ---- POST /clients/profile HTTP/1.1 Host: localhost User-Agent:...

PerfexCRM 1.9.7 - Arbitrary File Upload

PerfexCRM 1.9.7 - Arbitrary File Upload Exploit Title: PerfexCRM 1.9.7 – Unrestricted php5 File upload Exploit Author: Ahmad Mahfouz Description: PerfexCRM 1.9.7 prone to unrestricted file upload that lead to system take over by misconfigured elfinder plugin Contact: http://twitter.com/eln1x Date...

PerfexCRM 1.9.7 Arbitrary File Upload

Exploit Title: PerfexCRM 1.9.7 a Unrestricted php5 File upload Exploit Author: Ahmad Mahfouz Description: PerfexCRM 1.9.7 prone to unrestricted file upload that lead to system take over by misconfigured elfinder plugin Contact: http://twitter.com/eln1x Date: 12/01/2018 CVE: CVE-2017-17976 Version...

PerfexCRM 1.9.7 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: PerfexCRM 1.9.7 – Unrestricted php5 File upload Exploit Author: Ahmad Mahfouz Description: PerfexCRM 1.9.7 prone to unrestricted file upload that lead to system take over by misconfigured elfinder plugin Contact:...