99 matches found
Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC
Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 Cross Site Scripting XSS Assigned CVE Number: CVE-2017-7188...
EUVD-2019-5657
Malware in sbrugna...
EUVD-2018-11285
Malware in sbrugna...
EUVD-2015-5321
Malware in sbrugna...
EUVD-2017-9146
Malware in sbrugna...
EUVD-2017-6514
Malware in sbrugna...
EUVD-2017-7761
Malware in sbrugna...
EUVD-2018-11195
Malware in sbrugna...
EUVD-2018-8456
Malware in sbrugna...
EUVD-2017-16226
Malware in sbrugna...
CVE-2019-14472
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...
CVE-2017-18004
Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...
Zurmo cross-site scripting vulnerability (CNVD-2019-26160)
Zurmo is the United States Zurmo company's set of PHP-based open source customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.7-2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attack...
CVE-2019-14472
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...
CVE-2019-14472
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...
Default credentials
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...
CVE-2019-14472
CVE-2019-14472 affects Zurmo 3.2.7-2, with a cross-site scripting (XSS) vulnerability exploitable through the PATH_INFO entry (app/index.php/zurmo/default). The root cause, as reflected in CNVD-2019-26160, Red Hat and CNVD entries, points to insufficient input/data validation that allows injectio...
CVE-2019-14472
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...
PT-2019-13716
Name of the Vulnerable Software and Affected Versions Zurmo version 3.2.7-2 Description The issue is related to a security problem where an attacker can inject malicious code. The problem occurs via the "app/index.php/zurmo/default" API endpoint, specifically through the PATH INFO. Recommendation...
