CVE-2024-30048

CVE-2024-30048 relates to a spoofing vulnerability in Microsoft Dynamics 365 Customer Insights. The connected advisories indicate an XSS-style issue that could lead to execution of arbitrary code in the victim’s browser or access to sensitive data, with exploitation requiring prior authentication...

CVE-2024-30047 Dynamics 365 Customer Insights Spoofing Vulnerability

...

CVE-2024-30047 Dynamics 365 Customer Insights Spoofing Vulnerability

...

CVE-2024-30047

CVE-2024-30047 affects Microsoft Dynamics 365 Customer Insights. The vulnerability is a spoofing issue that enables Cross-Site Scripting (XSS). Attackers require authentication, and exploitation can lead to arbitrary browser-side code execution or access to sensitive data in the victim’s browser....

CVE-2023-24204

The SourceCodester Simple Customer Relationship Management System v1.0 is vulnerable to SQL injection in the get-quote.php and admin/login.php components. The root cause is insufficient input validation and a lack of parameterized queries. Specifically, the get-quote.php script fails to adequatel...

CVE-2023-24203

Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameters...

CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

PrestaShop is an open source e-commerce web application. A cross-site scripting XSS vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the customer thread feature flag is enabled throu...

CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

PrestaShop is an open source e-commerce web application. A cross-site scripting XSS vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the customer thread feature flag is enabled throu...

CVE-2024-34716

PrestaShop CVE-2024-34716 is a XSS flaw affecting 8.1.0–8.1.5 when the customer-thread feature flag is enabled. An attacker can upload a malicious file via the front-office contact form and trigger script execution when an admin opens the attachment in back office, potentially leaking session dat...

CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

PrestaShop is an open source e-commerce web application. A cross-site scripting XSS vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the customer thread feature flag is enabled throu...

CVE-2024-34210

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter...

CVE-2024-30801

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component...

Dynamics 365 Customer Insights Spoofing Vulnerability

...

Exploit for Cross-site Scripting in Oretnom23 Simple_Customer_Relationship_Management_System

CVE-2023-24203-and-CVE-2023-24204 Introduction In the ever...

Microsoft Dynamics 365 Customer Insights 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. For information about the cross-site scripting vulnerability in Microsoft Dynamic...

CVE-2024-30801: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component...

CVE-2023-24203: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameters...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CPE CP450 is an outdoor wireless client terminal device from China Gion Electronics TOTOLINK, which is mainly used to provide wireless broadband access services, especially for wireless network coverage in rural or remote areas. The TOTOLINK CPE CP450 suffers from a buffer overflow...

CVE-2023-24204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php...

PT-2024-26130 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions 8.1.0 through 8.1.5 Description: A cross-site scripting XSS vulnerability is present in PrestaShop when the customer-thread feature flag is enabled. This allows a hacker to upload a malicious file containing an XSS that wi...