CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core

Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...

CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core

Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...

CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core

Cross-Site Request Forgery CSRF in GitHub repository salesagility/suitecrm-core prior to 8.3.1...

CVE-2023-3293 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core

Cross-site Scripting XSS - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0...

CVE-2023-3293

CVE-2023-3293 is a stored Cross-site Scripting (XSS) vulnerability in the SuiteCRM Core repository (salesagility/suitecrm-core) prior to version 8.3.0. Multiple sources corroborate that the issue affects suitecrm-core and stems from storing malicious input that can be rendered to users. Reported ...

Path traversal

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-1034

CVE-2023-1034 describes a path traversal vulnerability in the SuiteCRM project where the sequence "..\filename" can be used to access files outside the web root. Affected software: salesagility/suitecrm versions prior to 7.12.9. The root cause is improper validation of file paths, enabling unauth...

PT-2023-16705 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: salesagility/suitecrm versions prior to 7.12.9 Description: The issue concerns a path traversal vulnerability, where the sequence '..filename' can be used to access files outside the intended directory. This could potentially allow unauthoriz...

SalesAgility SuiteCRM Remote Code Execution (CVE-2022-23940)

A remote code execution vulnerability exists in SalesAgility SuiteCRM. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SuiteCRM authenticated SQL injection in export functionality

This module exploits an authenticated SQL injection in SuiteCRM in versions before 7.12.6. The vulnerability allows an authenticated attacker to send specially crafted requests to the export entry point of the application in order to retrieve all the usernames and their associated password from t...

CVE-2022-0755

Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5...

CVE-2022-0756

Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5...

CVE-2022-0754

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5...

Authorization

Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5...

Authorization

Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5...

CVE-2022-0754 SQL Injection in salesagility/suitecrm

SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5...

CVE-2022-0754

CVE-2022-0754 affects SuiteCRM (salesagility/suitecrm) prior to version 7.12.5. The issue is an SQL Injection vulnerability in the GitHub repository path, demonstrated by unsanitized input used in a SQL query (example in ProspectLists/Duplicate.php), allowing an attacker to influence SQL commands...