CVE-2022-0755 Missing Authorization in salesagility/suitecrm

Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5...

SalesAgility SuiteCRM 安全漏洞

Salesagility SalesAgility SuiteCRM is a suite of enterprise-grade, open source Customer Relationship Management CRM from Salesagility UK. A security vulnerability exists in SalesAgility SuiteCRM that stems from incorrect authorization in the GitHub repository salesagility suitecrm prior to 7.12.5...

PT-2022-13416 · Salesagility · Salesagility/Suitecrm

Name of the Vulnerable Software and Affected Versions: salesagility/suitecrm versions prior to 7.12.5 Description: The issue concerns missing authorization in the salesagility/suitecrm GitHub repository. This problem affects versions prior to 7.12.5. There is no information provided about the...

CVE-2022-0756

CVE-2022-0756: Missing Authorization in salesagility/suitecrm prior to 7.12.5. The vulnerability affects the SuiteCRM GitHub repository’s Employee Module export flow, where a regular user could access the /index.php?entryPoint=export endpoint and export employee records without proper authorizati...

SalesAgility SuiteCRM 授权问题漏洞

Salesagility SalesAgility SuiteCRM is a suite of enterprise-grade, open source Customer Relationship Management CRM from Salesagility, UK. An authorization issue vulnerability exists in SalesAgility SuiteCRM, which stems from incorrect access control in the GitHub repository salesagility suitecrm...

CVE-2022-0755

CVE-2022-0755 involves missing authorization in the GitHub repository salesagility/suitecrm, affecting versions prior to 7.12.5. The issue arises from improper access control, enabling unauthorized actions that could impact user data and profiles. Public documents consistently describe the vulner...

SQL Injection in salesagility/suitecrm

Description In SuiteCRM v7.12.4, a malicious user can inject SQL query in order to affect the execution of predefined SQL commands impacting database leakage. Proof of Concept The $POST'record'1 parameter is controllable by a user and it is concatenated into SQL query 2 without validating them...

Exploit for CVE-2021-45897

CVE-2021-45897 PoC for CVE-2021-45897https://vulners.com/c...

Exploit for SQL Injection in Salesagility Suitecrm

CVE-2021-45041 PoC for CVE-2021-45041https://cve.mitre.org...

SuiteCRM 7.11.15 - 'last_name' Remote Code Execution (Authenticated)

Exploit Title: SuiteCRM 7.11.15 - 'lastname' Remote Code Execution Authenticated Date: 08 NOV 2020 Exploit Author: M. Cory Billington @th3y Vendor Homepage: https://suitecrm.com/ Software Link: https://github.com/salesagility/SuiteCRM Version: 7.11.15 and below Tested on: Ubuntu 20.04 LTS CVE:...

CVE-2019-13335

SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF...

CVE-2019-13335

SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF...

Design/Logic Flaw

SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF...

CVE-2019-13335

CVE-2019-13335 concerns a potential server-side request forgery (SSRF) in SalesAgility SuiteCRM 7.10.x (including 7.10.19) and 7.11.x prior to 7.11.7. The connected documents confirm the vulnerability type (SSRF) and affected versions but do not provide root-cause details, affected components, ex...

CVE-2019-13335

SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF...

SalesAgility SuiteCRM SQL Injection Vulnerability

SalesAgility SuiteCRM is a suite of enterprise-grade open source customer relationship management CRM. A SQL injection vulnerability exists in SalesAgility SuiteCRM versions 7.8.x prior to 7.8.30, 7.10.x prior to 7.10.17, and 7.11.x prior to 7.11.5, which can be exploited by an attacker to execut...

SalesAgility SuiteCRM SQL Injection Vulnerability (CNVD-2019-16998)

SalesAgility SuiteCRM is a suite of enterprise-grade open source customer relationship management CRM. A SQL injection vulnerability exists in SalesAgility SuiteCRM versions 7.8.x prior to 7.8.30, 7.10.x prior to 7.10.17, and 7.11.x prior to 7.11.5, which can be exploited by an attacker to execut...

CVE-2018-20816

An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with scri...

Cross site request forgery (csrf)

An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with scri...

CVE-2018-20816

An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with scri...