Sql injection

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function...

Sql injection

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function...

CVE-2023-24729

CVE-2023-24729 affects Simple Customer Relationship Management System v1.0. The SQL injection vulnerability occurs in the address parameter of the user profile update function. The issue is confirmed across multiple sources; CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low attack c...

CVE-2023-24732

The CVE-2023-24732 entry concerns Simple Customer Relationship Management System v1.0. The vulnerability is a SQL injection in the gender parameter used by the user profile update function, exposed in multiple connected sources. According to the NVD entry, the issue can impact confidentiality, in...

CVE-2023-24728

CVE-2023-24728 affects Simple Customer Relationship Management System v1.0. The vulnerability is a SQL injection in the user profile update function exposed via the contact parameter. Root cause is improper handling of input in the update path, enabling arbitrary SQL execution with high impact (c...

CVE-2023-24730

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function...

CVE-2023-24654

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Request a Quote function...

Sql injection

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function...

Sql injection

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function...

CVE-2023-24651

CVE-2023-24651 affects Simple Customer Relationship Management System v1.0. The registration page exposes a SQL injection in the name parameter, arising from improper handling of user input. Documented impact per CVSSv3.1 shows Network access with Low Confidentiality/Integrity impact and no Avail...

CVE-2023-24652

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function...

CVE-2023-24653

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...

CVE-2023-0917

A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack...

Yetiforcecrm Cross-site Request Forgery Vulnerability

YetiForceCrm is an open source Crm system from the Polish company YetiForce. Yetiforcecrm suffers from a cross-site request forgery vulnerability, for which no detailed vulnerability details are currently available...

crmsystem.de Cross Site Scripting vulnerability OBB-2153214

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Customer Relationship Management System (CRM) 1.0 Sql Injection Authentication Bypass Vulnerability

Exploit Title: Customer Relationship Management System CRM 1.0 - Sql Injection Authentication Bypass Exploit Author: ShafiqueWasta Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...

Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass

Exploit Title: Customer Relationship Management System CRM 1.0 - Sql Injection Authentication Bypass Date: 27/07/2021 Exploit Author: ShafiqueWasta Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System (CNVD-2021-50629)

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...

07FLY-CRM Customer Relationship Management System suffers from SQL Injection Vulnerability

07FLY-CRM customer relationship management system is based on the GPLv3 agreement issued for small and medium-sized management activities , currently provides customer relationship manager CRM, sales and marketing inventory JXC, the software is open-source and free of charge , in order to create...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...