CVE-2021-37221

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file...

CVE-2021-37221: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file...

PT-2021-21585

Name of the Vulnerable Software and Affected Versions Sourcecodester Customer Relationship Management System version 1.0 Description A file upload issue exists via the account update option and customer create option, allowing a remote malicious user to upload an arbitrary php file. Recommendatio...

Customer Relationship Management System (CRM) 1.0 - Remote Code Execution Exploit

Exploit Title: Customer Relationship Management System CRM 1.0 - Remote Code Execution Exploit Author: Ishan Saha Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...

CVE-2020-27997: Cross-Site Request Forgery (CSRF)

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery CSRF protection may lead to elevation of privileges e.g., /admin/customer/create to create an admin account...

PT-2020-16899

Name of the Vulnerable Software and Affected Versions SmartStoreNET versions prior to 4.1.0 Description The issue is related to a lack of Cross Site Request Forgery CSRF protection, which may lead to elevation of privileges. For example, an attacker could exploit this issue to create an admin...