Daybyday CRM 跨站脚本漏洞

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. A cross-site scripting vulnerability exists in DayByDay CRM. The vulnerability stems from the title field of a new task in the product...

Daybyday CRM 授权问题漏洞

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. DayByDay CRM Information Disclosure Vulnerability, the vulnerability stems from the product's failure to add an effective restriction o...

Daybyday CRM 授权问题漏洞

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. DayByDay CRM Information Disclosure Vulnerability, the vulnerability stems from the product's failure to add an effective restriction o...

DayByDay CRM 授权问题漏洞

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. A security bypass vulnerability exists in DayByDay CRM, which can be exploited by an attacker to change any user's password and gain...

Daybyday cross-site scripting vulnerability (CNVD-2020-75072)

Daybyday is a customer relationship management system. A stored cross-site scripting vulnerability exists in Daybyday 2.1.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the Title parameter of the New Lead screen...

CVE-2020-35707

Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...

CVE-2020-35707

Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...

CVE-2020-35706

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

CVE-2020-35705

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...

CVE-2020-35706

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

CVE-2020-35705

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen...

Cross site scripting

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

CVE-2020-35704

Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen...

CVE-2020-35704

CVE-2020-35704 affects Daybyday version 2.1.0. The vulnerability is a stored cross-site scripting (XSS) flaw in the Title parameter of the New Lead screen, allowing an attacker-supplied payload to be stored and subsequently rendered to users. Primary impact is client-side data integrity and poten...

CVE-2020-35705

The CVE-2020-35705 entry affects Daybyday 2.1.0, where a stored XSS vulnerability exists in the New User screen via the Name parameter. The issue is documented across multiple feeds, with CVSSv3.1 base score 5.4 (MEDIUM) and CVSSv2 base score 3.5 (LOW) indicating the impact is limited to confiden...