776 matches found
CVE-2020-19363
Vtiger CRM v7.2.0 exposes a directory traversal vulnerability in /libraries and /layout directories that allows an unauthenticated attacker to display hidden files and list directories. The issue is confirmed by Nuclei templates (Vtiger CRM v7.2.0 - Directory Listing) describing improper access c...
CVE-2020-19362
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page...
CVE-2020-19362
CVE-2020-19362 describes a reflected Cross-Site Scripting flaw in Vtiger CRM v7.2.0. The vulnerability occurs in vtigercrm/index.php? (view parameter) due to insufficient validation of client-side data by the web application, enabling an attacker to craft a link that could perform malicious actio...
PT-2021-10343
Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.2.0 Description: The issue is related to Reflected XSS in Vtiger CRM, where an attacker can perform malicious actions on users who open a maliciously crafted link or third-party web page through the view parameter in...
PT-2021-10344
Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.2.0 Description: The issue allows an attacker to display hidden files and list directories by utilizing the /libraries and /layout directories. Recommendations: For Vtiger CRM version 7.2.0, consider restricting access to...
Vtiger CRM 跨站脚本漏洞
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. Vtiger CRM v7.2.0 suffers from a cross-site scripting vulnerability th...
CVE-2020-19363: Exposure of Sensitive Information to an Unauthorized Actor
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories...
CVE-2020-19362: Improper Neutralization of Input During Web Page Generation
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page...
Vtiger CRM 信息泄露漏洞
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. Vtiger CRM v7.2.0 suffers from a path traversal vulnerability that can...
VTiger v7.0 CRM - 'To' Persistent XSS
Exploit Title: VTiger v7.0 CRM - 'To' Persistent XSS Date: 2020-11-18 Exploit Vulnerability-Lab Vendor Homepage: https://www.vtiger.com/open-source-crm/download-open-source/ Software Link: https://sourceforge.net/projects/vtigercrm/files/ Version: v7.0 Document Title: =============== VTiger v7.0...
Vtiger CRM 7.0 Cross Site Scripting
Document Title: =============== VTiger v7.0 CRM - To Persistent Email Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2227 Release Date: ============= 2020-11-18 Vulnerability Laboratory ID VL-ID: ==================================== 2227...
VTiger v7.0 CRM - (To) Persistent Email Vulnerability
Document Title: =============== VTiger v7.0 CRM - To Persistent Email Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2227 Release Date: ============= 2020-11-18 Vulnerability Laboratory ID VL-ID: ==================================== 2227...
vtiger-crm.2324883.n4.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1183841 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Vtiger-CRM-Vulnerabilities
Vtiger-CRM-Vulnerabilities Vtiger CRM v7.2.0 has Cross-Site Sc...
CVE-2013-3591
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability...
Remote code execution
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability...
CVE-2013-3591
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability...
CVE-2013-3591
Summary of CVE-2013-3591 : The vulnerability affects vTiger CRM versions 5.3 and 5.4, where the attacker can abuse the vulnerable vTiger “files” upload folder to upload a PHP script and achieve arbitrary PHP code execution. Multiple connected sources document an authenticated remote-code-executio...
PT-2020-7450
Name of the Vulnerable Software and Affected Versions: vTiger CRM versions 5.3 through 5.4 Description: The issue allows for arbitrary PHP code execution in the 'files' upload folder. Recommendations: For versions 5.3 through 5.4, update to a version that contains a fix for this issue. At the...