12 matches found
EUVD-2023-49238
Malicious code in bioql PyPI...
CVE-2023-44915
A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...
CVE-2023-44915
A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...
CVE-2023-44915
A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...
CVE-2023-44915
A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...
PT-2025-26852 · C3Crm · C3Crm
Name of the Vulnerable Software and Affected Versions: c3crm versions up to 3.0.4 Description: A cross-site scripting XSS issue in the /Login.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login error parameter. This enables attacke...
CVE-2023-44915
The c3crm CRM software (up to v3.0.4 ) contains a cross-site scripting (XSS) vulnerability in the /Login.php component. The root cause is the improper neutralization of the login_error parameter, which allows an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. T...
c3crm 跨站脚本漏洞
c3crm is a CRM software by dfar2008 individual developer. A security vulnerability exists in c3crm 3.0.4 and earlier versions, which stems from an unvalidated input of the loginerror parameter in the component/Login.php, which could lead to a cross-site scripting attack...
CVE-2023-44915: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...
CVE-2023-44915
A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...
CVE-2023-44915
A cross-site scripting XSS vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the loginerror parameter...
