CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

CVE-2023-24655

CVE-2023-24655 affects Simple Customer Relationship Management System v1.0. A SQL injection flaw exists in the Profile Update function via the name parameter, enabling potentially arbitrary SQL execution. The CVSS 3.1 vector indicates a network attack with no user interaction and requires no priv...

PT-2023-19755

Name of the Vulnerable Software and Affected Versions Simple Customer Relationship Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the query parameter in the user profile update function. Recommendations For...