Lucene search
+L

903 matches found

Cvelist
Cvelist
added 2023/03/23 12:0 a.m.29 views

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

10AI score0.01023EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/23 12:0 a.m.7 views

PT-2023-19728 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: A SQL injection issue was found in the Profile Update function, specifically via the name parameter. Recommendations: For Simple Customer Relationship Management System...

9.8CVSS9.7AI score0.01023EPSS
SaveExploits1References4
CVE
CVE
added 2023/03/23 12:0 a.m.51 views

CVE-2023-24655

CVE-2023-24655 affects Simple Customer Relationship Management System v1.0. A SQL injection flaw exists in the Profile Update function via the name parameter, enabling potentially arbitrary SQL execution. The CVSS 3.1 vector indicates a network attack with no user interaction and requires no priv...

9.8CVSS9.7AI score0.01023EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/23 12:0 a.m.10 views

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

9.8AI score0.01023EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/23 12:0 a.m.6 views

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Simple Customer Relationship Management System v1.0, which can be exploited to perform SQL injection via the name...

9.8CVSS8.7AI score0.01023EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/03/16 6:35 p.m.29 views

Reflective Cross-site Scripting Vulnerability in twitter-bootstrap-rails

The twitter-bootstrap-rails Gem for Rails contains a flaw that enables a reflected cross-site scripting XSS attack. This flaw exists because the bootstrapflash helper method does not validate input when handling flash messages before returning it to users. This may allow a context-dependent...

2AI score0.00408EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/03/15 2:15 p.m.6 views

CVE-2023-24731

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function...

8.8CVSS5.8AI score0.01006EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/15 2:15 p.m.22 views

CVE-2023-24731

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function...

8.8CVSS8.9AI score0.01006EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/15 2:15 p.m.5 views

CVE-2023-24732

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function...

8.8CVSS5.8AI score0.01006EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/15 2:15 p.m.8 views

CVE-2023-24730

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function...

8.8CVSS7.3AI score0.01049EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/15 2:15 p.m.16 views

CVE-2023-24732

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function...

8.8CVSS8.9AI score0.01006EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/15 2:15 p.m.7 views

CVE-2023-24729

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function...

8.8CVSS7.3AI score0.01049EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/15 2:15 p.m.21 views

Sql injection

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function...

6.5CVSS8.9AI score0.01006EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/15 12:0 a.m.10 views

CVE-2023-24728

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...

9AI score0.01006EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/15 12:0 a.m.6 views

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a Simple Customer Relationship Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which originates from a SQL injection vulnerability in the query...

8.8CVSS8.2AI score0.01006EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/03/15 12:0 a.m.7 views

CVE-2023-24731

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function...

9AI score0.01006EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/15 12:0 a.m.14 views

PT-2023-19756 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the gender parameter in the user profile update function. Recommendations:...

8.8CVSS8.6AI score0.01006EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2023/03/15 12:0 a.m.10 views

CVE-2023-24732

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function...

9AI score0.01006EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/15 12:0 a.m.7 views

PT-2023-19754 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the company parameter in the user profile update function. Recommendations:...

8.8CVSS8.6AI score0.01049EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/03/15 12:0 a.m.8 views

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which originates from a SQL injection vulnerability in the address...

8.8CVSS8.2AI score0.01049EPSS
SaveExploits1References4
Rows per page
Query Builder