ITG Computer vSRM Supplier Relationship Management System 跨站脚本漏洞

ITG Computer vSRM Supplier Relationship Management System is a supplier relationship management system from ITG Computer. A cross-site scripting vulnerability exists in ITG Computer vSRM Supplier Relationship Management System versions prior to 28.08.2024, which stems from improper input...

PT-2024-33372 · Videowhisper.Com · Videowhisper.Com Contact Forms +3

Name of the Vulnerable Software and Affected Versions: VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages versions 1.10.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This affects...

WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Contact Forms, Live Support, CRM, Video Messages versions = 1.10.2...

Vtiger CRM 安全漏洞

Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM version v8.2.0. An attacker can exploit t...

PT-2024-31907 · Zhejiang University · Zhejiang University Entersoft Customer Resource Management System

Name of the Vulnerable Software and Affected Versions: Zhejiang University Entersoft Customer Resource Management System versions v2002 through v2024 Description: An arbitrary file upload vulnerability in the ProductAction.entphone interface allows attackers to execute arbitrary code via uploadin...

SQL Injection Vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-43219)

UFIDA U8CRM is a professional enterprise-level CRM software designed to help companies efficiently manage customer relationships, improve sales performance and provide quality customer service. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-41603)

UFIDA U8CRM is a professional enterprise-level CRM software designed to help companies efficiently manage customer relationships, improve sales performance and provide quality customer service. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain...

WordPress plugin Propovoice CRM 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-42994

VTiger CRM = 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection in the "CompanyDetails" operation of the "MailManager" module...

Vtiger CRM 安全漏洞

Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in VTiger CRM version 8.1.0 and prior versions, which...

Vtiger CRM 安全漏洞

Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM version 8.1.0 and prior versions, which...

SAP CRM 代码问题漏洞

SAP CRM is a customer relationship management system from SAP, a German company. A code issue vulnerability exists in SAP CRM. An authenticated attacker could exploit this vulnerability to enumerate HTTP endpoints in the internal network via specially crafted HTTP requests...

Enjay IT Solutions Enjay CRM 安全漏洞

Enjay IT Solutions Enjay CRM is a customer relationship management software from Enjay IT Solutions, India. A security vulnerability exists in Enjay IT Solutions Enjay CRM version 1.0, which stems from a vulnerability that allows an attacker to escape a restricted endpoint environment and gain...

CVE-2024-39598

SAP CRM WebClient UI Framework allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the applicati...

SAP CRM 安全漏洞

SAP CRM is a customer relationship management system from SAP in Germany. SAP CRM suffers from an authorization issue vulnerability that stems from not performing the necessary authorization checks on authenticated users, which could be exploited by an attacker to cause privilege escalation and...

SAP CRM Cross-Site Scripting Vulnerability

SAP CRM is a customer relationship management system from SAP, a German company. A cross-site scripting vulnerability exists in SAP CRM that stems from insufficient input validation and allows an unauthenticated attacker to craft a URL link embedded with a malicious script that, when clicked by a...

BIT-SUITECRM-2024-36406 SuiteCRM vulnerable to open redirects

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, unchecked input allows for open re-direct. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

BIT-SUITECRM-2024-36409 SuiteCRM authenticated SQL Injection in TreeData entrypoint

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in Tree data entry point. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

BIT-SUITECRM-2024-36411 SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax displayView controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

BIT-SUITECRM-2024-36412 SuiteCRM unauthenticated SQL Injection

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue...