CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Prion•added 2011/12/02 4:55 p.m.•22 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vTiger CRM 5.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 viewname parameter in a CalendarAjax action, 2 activitymode parameter in a DetailView action, 3 contactid and 4 parentid parameters in an...

4.3CVSS6.1AI score0.02844EPSS

SaveExploits3References9Affected Software1

Cvelist•added 2011/12/02 4:00 p.m.•36 views

CVE-2011-4670

5.8AI score0.02844EPSS

SaveExploits3References9

Rapid7 Vulnerability Database (full)•added 2011/12/02 12:00 a.m.•4 views

CVE-2011-4670: Improper Neutralization of Input During Web Page Generation

4.3CVSS5.9AI score0.02844EPSS

SaveExploits3References2

Prion•added 2007/07/06 7:30 p.m.•26 views

Sql injection

SQL injection vulnerability in the dashboard include/utils/SearchUtils.php in vtiger CRM before 5.0.3 allows remote authenticated users to execute arbitrary SQL commands via the assigneduserid parameter in a Potentials ListView action to index.php...

6.5CVSS8.6AI score0.01396EPSS

SaveExploits0References5Affected Software1

NVD•added 2007/07/06 7:30 p.m.•24 views

CVE-2007-3603

6.5CVSS7.9AI score0.01396EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2007/07/06 12:00 a.m.•3 views

CVE-2007-3603: Undefined Security Weakness

6.5CVSS6.4AI score0.01396EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2007/07/06 12:00 a.m.•4 views

CVE-2007-3604: Undefined Security Weakness

vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php...

4CVSS5.9AI score0.01077EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by