CVE-2024-30047

CVE-2024-30047 affects Microsoft Dynamics 365 Customer Insights. The vulnerability is a spoofing issue that enables Cross-Site Scripting (XSS). Attackers require authentication, and exploitation can lead to arbitrary browser-side code execution or access to sensitive data in the victim’s browser....

CVE-2023-24204

CVE-2023-24204 concerns the SourceCodester Simple Customer Relationship Management System v1.0. Public records describe an SQL injection vulnerability in get-quote.php (via the name parameter) that can allow arbitrary SQL execution, and related discussions extend the issue to login.php, suggestin...

CVE-2023-24203

Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameters...

CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

PrestaShop is an open source e-commerce web application. A cross-site scripting XSS vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the customer thread feature flag is enabled throu...

CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

PrestaShop is an open source e-commerce web application. A cross-site scripting XSS vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the customer thread feature flag is enabled throu...

CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

PrestaShop is an open source e-commerce web application. A cross-site scripting XSS vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the customer thread feature flag is enabled throu...

CVE-2024-34716

PrestaShop CVE-2024-34716 is a XSS flaw affecting 8.1.0–8.1.5 when the customer-thread feature flag is enabled. An attacker can upload a malicious file via the front-office contact form and trigger script execution when an admin opens the attachment in back office, potentially leaking session dat...

CVE-2024-34210

TOTOLINK outdoor CPE CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter...

CVE-2024-30801

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component...

Dynamics 365 Customer Insights Spoofing Vulnerability

...

Exploit for Cross-site Scripting in Oretnom23 Simple_Customer_Relationship_Management_System

CVE-2023-24203-and-CVE-2023-24204 Introduction In the ever...

KLA67396 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to spoof user interface. Original advisories CVE-2024-30048 CVE-2024-30047 Related products Microsoft-Dynamics-365 CVE list CVE-2024-30048 warning CVE-2024-30047 warning Solution Install...

Simple Customer Relationship Management 安全漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from an SQL injection vulnerability that allows an attack...

PT-2024-26130 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions 8.1.0 through 8.1.5 Description: A cross-site scripting XSS vulnerability is present in PrestaShop when the customer-thread feature flag is enabled. This allows a hacker to upload a malicious file containing an XSS that wi...

Microsoft Dynamics 365 Customer Insights 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. For information about the cross-site scripting vulnerability in Microsoft Dynamic...

PT-2024-12026 · Sourcecodester · Sourcecodester Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Customer Relationship Management System version 1.0 Description: The issue allows an attacker to execute arbitrary code via the name parameter in the "get-quote.php" endpoint. This enables the attacker to potentially...

TOTOLINK CPE CP450 安全漏洞

TOTOLINK CPE CP450 is an outdoor wireless client terminal device from China Gion Electronics TOTOLINK, which is mainly used to provide wireless broadband access services, especially for wireless network coverage in rural or remote areas. The TOTOLINK CPE CP450 suffers from a buffer overflow...

PT-2024-12025 · Sourcecodester · Sourcecodester Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Customer Relationship Management System version 1.0 Description: The issue allows an attacker to execute arbitrary code. This can be achieved via the company or query parameters in a Cross Site Scripting vulnerability, o...

Microsoft Dynamics 365 Customer Insights 跨站脚本漏洞

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management, and business intelligence management. For information about the cross-site scripting vulnerability in Microsoft Dynamic...

Simple Customer Relationship Management 安全漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by the individual developer Carlo Montero. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a cross-site scripting vulnerability that allo...