CVE-2021-37221

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file...

CVE-2021-37221: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file...

Customer Relationship Management System (CRM) 1.0 - Remote Code Execution Exploit

Exploit Title: Customer Relationship Management System CRM 1.0 - Remote Code Execution Exploit Author: Ishan Saha Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...

CVE-2020-27997: Cross-Site Request Forgery (CSRF)

An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery CSRF protection may lead to elevation of privileges e.g., /admin/customer/create to create an admin account...