3 matches found
CVE-2023-24653
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...
CVE-2023-24653
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...
CVE-2023-24653
Affected product: Simple Customer Relationship Management System v1.0. Vulnerability: SQL injection in the Change Password function via the oldpass parameter. Root cause / vector: Vulnerability described as a SQL injection vulnerability stemming from handling of the oldpass input. Impact: CVSS v3...