CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

CNVD•added 2018/01/02 12:00 a.m.•17 views

Zurmo cross-site scripting vulnerability (CNVD-2018-02168)

Zurmo is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.3. A remote attacker can exploit this vulnerability by sending the 'latitude' or 'longitude' parameter to...

5.4CVSS6.4AI score0.00636EPSS

SaveExploits1References1

Prion•added 2017/12/31 7:29 p.m.•21 views

Design/Logic Flaw

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

3.5CVSS5.2AI score0.00636EPSS

SaveExploits1References1Affected Software1

OSV•added 2017/12/31 7:29 p.m.•13 views

CVE-2017-18004

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

5.4CVSS5.8AI score0.00636EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2017/12/31 12:00 a.m.•3 views

CVE-2017-18004: Improper Neutralization of Input During Web Page Generation

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint...

5.4CVSS5.9AI score0.00636EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by