CVE-2018-16654

Zurmo 3.2.4 Stable is affected by a cross-site scripting (XSS) vulnerability in the endpoint app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1. The issue allows injection of scripts via crafted URL parameters, escalating potential to modify or exfiltrate data (per CVSS metr...

Zurmo cross-site scripting vulnerability (CNVD-2019-07202)

Zurmo is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.4 Stable. A remote attacker can exploit this vulnerability to execute injected malicious script with the help of th...

Zurmo cross-site scripting vulnerability (CNVD-2018-02168)

Zurmo is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.3. A remote attacker can exploit this vulnerability by sending the 'latitude' or 'longitude' parameter to...

CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

Design/Logic Flaw

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

CVE-2017-18004

Zurmo 3.2.3 is affected by an XSS vulnerability triggered by the latitude or longitude parameter to maps/default/mapAndPoint in the Zurmo web application (PHP-based CRM). The issue is reported across multiple sources (e.g., CVE-2017-18004, CNVD-2018-02168, RH Red Hat, NVD) with consistent descrip...

Zurmo Cross-Site Scripting Vulnerability

Zurmo is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.1.57987acc3018. A remote attacker can exploit this vulnerability by sending a 'redirectUrl' parameter with a data:...

Zurmo URL Redirection Vulnerability

Zurmo is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. An open redirect vulnerability exists in Zurmo version 3.2.1.57987acc3018. An attacker can exploit this vulnerability by sending the 'redirectUrl' parameter with an http: URL to...

CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-15039

Cross-site scripting XSS exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-15039

Cross-site scripting XSS exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

Design/Logic Flaw

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

Cross site scripting

Cross-site scripting XSS exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...

CVE-2017-15039

Zurmo 3.2.1.57987acc3018 is affected by an XSS vulnerability: an attacker can use a data: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting to execute malicious JavaScript in the user’s browser. This is documented across multiple sources (e.g., CNVD-2017-36345, NVD ...

CVE-2017-16569

Zurmo 3.2.1.57987acc3018 is affected by an open URL redirect via the redirectUrl parameter in app/index.php/meetings/default/createMeeting. This vulnerability allows redirection to an http: URL, enabling potential abuse to redirect users to a malicious domain. The issue is documented across multi...

CVE-2017-16569

An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index.php/meetings/default/createMeeting...