Lucene search
K

8 matches found

OSV
OSV
added 2022/01/08 12:31 a.m.18 views

GHSA-FRXP-XXX8-HRG6 Missing Authorization in DayByDay CRM

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of...

4.3CVSS4.4AI score0.0068EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/01/05 3:15 p.m.3 views

CVE-2022-22108

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of...

4.3CVSS5.8AI score0.0068EPSS
Exploits0References3Affected Software2
NVD
NVD
added 2022/01/05 3:15 p.m.14 views

CVE-2022-22108

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of...

4.3CVSS0.0068EPSS
Exploits0References2
Prion
Prion
added 2022/01/05 3:15 p.m.17 views

Authorization

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of...

4CVSS4.5AI score0.0068EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/05 3:5 p.m.16 views

CVE-2022-22108 DayByDay CRM - Missing Authorization when Viewing Absences

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of...

4.3CVSS4.8AI score0.0068EPSS
Exploits0References2
exploitpack
exploitpack
added 2015/12/15 12:0 a.m.17 views

Ovidentia absences Module 2.64 - Remote File Inclusion

Ovidentia absences Module 2.64 - Remote File Inclusion Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download:...

0.3AI score
Exploits0
0day.today
0day.today
added 2015/12/15 12:0 a.m.32 views

Ovidentia absences Module 2.64 - Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download:...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2015/12/15 12:0 a.m.29 views

Ovidentia absences Module 2.64 - Remote File Inclusion

Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fabsences&file=absences-2-64.zip&idf=88...

7.4AI score
Exploits0
Rows per page
Query Builder