776 matches found
CVE-2025-70936
Vtiger CRM version 8.4.0 is vulnerable to a reflected cross-site scripting (XSS) flaw in the MailManager module. The root cause is the improper handling of user-controlled input within the _folder parameter, which allows an attacker to deliver a specially crafted, double URL-encoded payload . Thi...
CVE-2025-70936
Vtiger CRM 8.4.0 contains a reflected cross-site scripting XSS vulnerability in the MailManager module. Improper handling of user-controlled input in the folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s...
CVE-2025-70936
Vtiger CRM 8.4.0 contains a reflected cross-site scripting XSS vulnerability in the MailManager module. Improper handling of user-controlled input in the folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s...
CVE-2025-70936: Improper Neutralization of Input During Web Page Generation
Vtiger CRM 8.4.0 contains a reflected cross-site scripting XSS vulnerability in the MailManager module. Improper handling of user-controlled input in the folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s...
VulnCheck KEV: CVE-2020-19363
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories...
CVE-2016-10754
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...
CVE-2022-38335
Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the e-mail template modules...
CVE-2025-23455
Cross-Site Request Forgery CSRF vulnerability in Master Software Solutions WP VTiger Synchronization msstiger allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through = 1.1.1...
CVE-2025-1618
A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unknown code of the file /modules/Mobile/index.php. The manipulation of the argument operation leads to cross site scripting. The attack can be initiated remotely. The exploit has be...
vTiger CRM XSS
The vulnerability of the vTiger CRM customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
EUVD-2005-3815
Malware in sbrugna...
EUVD-2007-3583
Malware in sbrugna...
EUVD-2020-11266
Malware in sbrugna...
EUVD-2007-3587
Malware in sbrugna...
EUVD-2005-3813
Malware in sbrugna...
EUVD-2011-4598
Malware in sbrugna...
EUVD-2007-3585
Malware in sbrugna...
EUVD-2008-3444
Malware in sbrugna...