85 matches found
CVE-2008-3400
XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129...
Remote file inclusion
PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the includedirectory parameter...
CVE-2008-3399
PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the includedirectory parameter...
CVE-2008-3399
CVE-2008-3399 is a PHP remote file inclusion vulnerability in XRMS CRM 1.99.2 that occurs when register_globals is enabled. The issue allows an attacker to have arbitrary PHP code executed via the include_directory parameter. The NVD entry lists a base score of 6.8 (Medium) with network attack ve...
CVE-2008-3398
CVE-2008-3398 refers to multiple XSS flaws in XRMS CRM 1.99.2. The affected component is XRMS CRM, with the vulnerability allowing remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components (potentially including login.php). The root cause is insuffici...
CVE-2008-3398
Multiple cross-site scripting XSS vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129...
CVE-2008-3400
XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...
CVE-2008-3399
PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the includedirectory parameter...
CVE-2008-3400
CVE-2008-3400 affects XRMS CRM 1.99.2. The vulnerability stems from a direct request to tests/info.php, which calls phpinfo and exposes configuration information to remote attackers. Public references indicate available exploits (e.g., Exploit-DB) and advisories, confirming external reachability ...
CVE-2008-3399: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the includedirectory parameter...
CVE-2008-3400: Exposure of Sensitive Information to an Unauthorized Actor
XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...
CVE-2008-3398: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web script or HTML via the msg parameter to unspecified components, possibly including login.php. NOTE: this may overlap CVE-2008-1129...
XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities
XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...
XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering
XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...
XRms 1.99.2 - Remote File Inclusion Cross-Site Scripting Information Gathering
XRms 1.99.2 - Remote File Inclusion Cross-Site Scripting Information Gathering XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File:...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-1129
Cross-site scripting XSS vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-1129: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-1129
XRMS CRM contains a Cross-site scripting (XSS) vulnerability in admin/users/self.php exploitable via the msg parameter. The CVE-2008-1129 entry notes remote script/HTML injection, with XSS details corroborated by related XRMS disclosures (and cross-referenced CVEs such as CVE-2008-3398 and CVE-20...