130 matches found
CVE-2018-20816
An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with scri...
CVE-2018-20816
CVE-2018-20816 is an XSS combined with CSRF vulnerability in SalesAgility SuiteCRM 7.x, affecting versions before 7.8.24 and 7.10.x before 7.10.11. The issue enables cookie stealing and session hijacking via the add dashboard pages feature when a user is lured to a crafted URL. Root cause is an X...
CVE-2018-20816
An XSS combined with CSRF vulnerability discovered in SalesAgility SuiteCRM 7.x before 7.8.24 and 7.10.x before 7.10.11 leads to cookie stealing, aka session hijacking. This issue affects the "add dashboard pages" feature where users can receive a malicious attack through a phished URL, with scri...
SuiteCRM Detection (HTTP)
HTTP based detection of SuiteCRM. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.141791";...
SalesAgility SuiteCRM Cross-Site Scripting Vulnerability
SalesAgility SuiteCRM is an open source Customer Relationship Management CRM system. The system supports differentiated marketing for different customer needs, managing and distributing sales leads, and enabling information sharing and tracking of sales representatives. A cross-site scripting...
CVE-2018-15606
An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message...
Cross site scripting
An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message...
CVE-2018-15606
An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message...
CVE-2018-15606
SalesAgility SuiteCRM is affected by CVE-2018-15606, an XSS vulnerability in SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8. The root cause is a cross-site scripting path triggered by phishing an error message. Affected products include SuiteCRM 7.x (pre-7.8.21) and 7.10.x (pre-7.10.8). CNVD...