4 matches found
Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11057)
Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the...
CVE-2017-9366
Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting XSS vulnerability in modules/Base/Dashboard/Dashboard0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tabname parameter...
Cross site scripting
Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting XSS vulnerability in modules/Base/Dashboard/Dashboard0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tabname parameter...
CVE-2017-9366
Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting XSS vulnerability in modules/Base/Dashboard/Dashboard0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tabname parameter...