Lucene search
+L

1144 matches found

Positive Technologies
Positive Technologies
•added 2023/03/15 12:00 a.m.•24 views

PT-2023-19756 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the gender parameter in the user profile update function. Recommendations:...

8.8CVSS8.6AI score0.01006EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/03/15 12:00 a.m.•15 views

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which originates from a SQL injection vulnerability in the address...

8.8CVSS8.2AI score0.01049EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/15 12:00 a.m.•0 views

CVE-2023-24730: Improper Neutralization of Special Elements used in an SQL Command

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function...

8.8CVSS5.8AI score0.01049EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/03/15 12:00 a.m.•14 views

CVE-2023-24730

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function...

9AI score0.01049EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/03/15 12:00 a.m.•14 views

CVE-2023-24729

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function...

8.9AI score0.01049EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/15 12:00 a.m.•2 views

CVE-2023-24728: Improper Neutralization of Special Elements used in an SQL Command

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...

8.8CVSS5.8AI score0.01006EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/15 12:00 a.m.•0 views

CVE-2023-24732: Improper Neutralization of Special Elements used in an SQL Command

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function...

8.8CVSS5.8AI score0.01006EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/03/15 12:00 a.m.•34 views

CVE-2023-24729

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function...

9.1AI score0.01049EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2023/03/08 12:00 a.m.•34 views

Debian: Security Advisory (DLA-509-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.9AI score0.10232EPSS
SaveExploits0References3
OSV
OSV
•added 2023/02/27 4:15 p.m.•16 views

CVE-2023-24653

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...

8.8CVSS7.3AI score0.01048EPSS
SaveExploits1References3
OSV
OSV
•added 2023/02/27 4:15 p.m.•13 views

CVE-2023-24651

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page...

5.4CVSS6.1AI score0.00561EPSS
SaveExploits1References3
OSV
OSV
•added 2023/02/27 4:15 p.m.•15 views

CVE-2023-24656

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function...

8.8CVSS7.3AI score0.01048EPSS
SaveExploits1References3
OSV
OSV
•added 2023/02/27 4:15 p.m.•11 views

CVE-2023-24652

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function...

8.8CVSS5.8AI score0.01048EPSS
SaveExploits1References3
OSV
OSV
•added 2023/02/27 4:15 p.m.•13 views

CVE-2023-24654

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Request a Quote function...

8.8CVSS7.3AI score0.01048EPSS
SaveExploits1References3
OSV
OSV
•added 2023/02/27 4:15 p.m.•13 views

CVE-2023-24364

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...

8.8CVSS5.8AI score0.01048EPSS
SaveExploits1References3
NVD
NVD
•added 2023/02/27 4:15 p.m.•20 views

CVE-2023-24364

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...

8.8CVSS9AI score0.01048EPSS
SaveExploits1References3
NVD
NVD
•added 2023/02/27 4:15 p.m.•26 views

CVE-2023-24656

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function...

8.8CVSS9AI score0.01048EPSS
SaveExploits1References3
Prion
Prion
•added 2023/02/27 4:15 p.m.•23 views

Sql injection

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page...

4.9CVSS5.9AI score0.00561EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/02/27 4:15 p.m.•29 views

Sql injection

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...

6.5CVSS8.9AI score0.01048EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/02/27 4:15 p.m.•24 views

Sql injection

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...

6.5CVSS8.9AI score0.01048EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder