Lucene search
+L

776 matches found

OSV
OSV
•added 2024/08/29 6:15 p.m.•11 views

CVE-2024-44777

A reflected cross-site scripting XSS vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

9.6CVSS6AI score0.00717EPSS
SaveExploits2References2
OSV
OSV
•added 2024/08/29 6:15 p.m.•9 views

CVE-2024-44776

An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS5.6AI score0.00324EPSS
SaveExploits1References2
OSV
OSV
•added 2024/08/29 6:15 p.m.•11 views

CVE-2024-44778

A reflected cross-site scripting XSS vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

9.6CVSS6AI score0.00732EPSS
SaveExploits2References2
NVD
NVD
•added 2024/08/29 6:15 p.m.•27 views

CVE-2024-44779

A reflected cross-site scripting XSS vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

9.6CVSS0.00778EPSS
SaveExploits2References1
NVD
NVD
•added 2024/08/29 6:15 p.m.•28 views

CVE-2024-44776

An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.1CVSS0.00324EPSS
SaveExploits1References1
NVD
NVD
•added 2024/08/29 6:15 p.m.•41 views

CVE-2024-44777

A reflected cross-site scripting XSS vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

9.6CVSS0.00717EPSS
SaveExploits2References1
NVD
NVD
•added 2024/08/29 6:15 p.m.•37 views

CVE-2024-44778

A reflected cross-site scripting XSS vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

9.6CVSS0.00732EPSS
SaveExploits2References1
OSV
OSV
•added 2024/08/29 6:15 p.m.•11 views

CVE-2024-44779

A reflected cross-site scripting XSS vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

9.6CVSS7.5AI score0.00778EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/08/29 12:00 a.m.•15 views

vTiger CRM 安全漏洞

Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in vTiger CRM version 7.4.0, which stems from...

9.6CVSS8.7AI score0.00717EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2024/08/29 12:00 a.m.•13 views

Vtiger CRM 安全漏洞

Vtiger CRM is a customer relationship management system CRM developed based on SugarCRM by Vtiger USA. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM version 7.4.0, which stems from...

9.6CVSS8.7AI score0.00778EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2024/08/29 12:00 a.m.•23 views

CVE-2024-44777

A reflected cross-site scripting XSS vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

6AI score0.00717EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/29 12:00 a.m.•4 views

CVE-2024-44778: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

9.6CVSS8.5AI score0.00732EPSS
SaveExploits2References3
CVE
CVE
•added 2024/08/29 12:00 a.m.•72 views

CVE-2024-44777

vTiger CRM 7.4.0 is affected by a reflected XSS in the tag parameter on the index page, enabling an attacker to execute arbitrary code in a user’s browser. The vulnerability is described across multiple sources (RH and NVD/NVD-derived records) with attacker-controlled payloads triggering code exe...

9.6CVSS6AI score0.00717EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2024/08/29 12:00 a.m.•50 views

CVE-2024-44776

An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL...

0.00324EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/08/29 12:00 a.m.•45 views

CVE-2024-44778

A reflected cross-site scripting XSS vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

0.00732EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2024/08/29 12:00 a.m.•41 views

CVE-2024-44777

A reflected cross-site scripting XSS vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

0.00717EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2024/08/29 12:00 a.m.•13 views

CVE-2024-44776

An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL...

6.6AI score0.00324EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/08/29 12:00 a.m.•15 views

CVE-2024-44778

A reflected cross-site scripting XSS vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

6AI score0.00732EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2024/08/29 12:00 a.m.•26 views

CVE-2024-44779

A reflected cross-site scripting XSS vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

6AI score0.00778EPSS
SaveExploits2References2
CVE
CVE
•added 2024/08/29 12:00 a.m.•68 views

CVE-2024-44776

CVE-2024-44776: Open Redirect in vTiger CRM 7.4.0 via the page parameter. A crafted URL can redirect users to a malicious site. Affected: vTiger CRM 7.4.0; root cause: lack of validation of the page parameter. Impact: redirection to attacker-controlled sites. Remediation: not specified in the pro...

6.1CVSS6.3AI score0.00324EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder