CVE-2025-7874

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /env.jsp. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-7874

CVE-2025-7874 affects Metasoft MetaCRM up to 6.4.2. The issue arises from manipulation of an unknown functionality in /env.jsp, causing information disclosure. The vulnerability is remotely exploitable and the exploit has been disclosed publicly. Multiple sources (NVD, Red Hat, CVE list entries, ...

CVE-2025-7874 Metasoft 美特软件 MetaCRM env.jsp information disclosure

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /env.jsp. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the...

Metasoft MetaCRM 安全漏洞

Metasoft MetaCRM is a customer relationship management system software from China Metasoft Metasoft. A security vulnerability exists in Metasoft MetaCRM 6.4.2 and earlier versions, which originates from improper handling of the file /env.jsp resulting in information disclosure...

CVE-2025-7874: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Metasoft 美特软件 MetaCRM up to 6.4.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /env.jsp. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the...

Caucho Resin 2.0/2.1 - Multiple HTML Injection and Cross-site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8852/info It has been reported that Caucho Resin is prone to multiple HTML Injection and cross-site scripting vulnerabilities in various scripts that may allow a remote attacker to cause hostile HTML or script code to be...

CVE-2003-1513: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 env.jsp, 2 form.jsp, 3 session.jsp, 4 the move parameter to tictactoe.jsp, or the 5 name or 6 comment fields to...