8 matches found
EUVD-2018-20877
Malware in sbrugna...
CVE-2018-9283
An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...
CVE-2018-9283
An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...
Cross site scripting
An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...
CVE-2018-9283
Affects CremeCRM 1.6.12: ten stored XSS vulnerabilities in contact creation/modification parameters (firstname, lastname, billing/shipping address fields). The payload is stored in the application database and triggers JavaScript execution on page visits. No patch/version remediation or exploitat...
CVE-2018-9283
An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...
PT-2018-18959
Name of the Vulnerable Software and Affected Versions CremeCRM version 1.6.12 Description A stored Cross-Site Scripting XSS issue was found, affecting the contact creation and modification page. The issue is related to the firstname, lastname, billing address-address, billing address-zipcode,...
CVE-2018-9283: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting XSS vulnerabilities in the firstname, lastname, billingaddress-address, billingaddress-zipcode, billingaddress-city, billingaddress-department, shippingaddress-address, shippingaddress-zipcode,...