PHPGurukul Small CRM Cross-Site Scripting Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A cross-site scripting vulnerability exists in PHPGurukul Small CRM version v.3.0, which stems from the presence of a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via...

CVE-2023-44075

CVE-2023-44075 is a reported Cross Site Scripting vulnerability in Small CRM for PHP v3.0. The issue arises in the Address parameter and can let a remote attacker execute arbitrary code when exploiting the vulnerability. Documented impact ranges from constructive code execution to potential confi...

CVE-2023-44075

Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...

CVE-2023-44075: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...

PT-2023-29087 · Unknown · Small Crm In Php

Name of the Vulnerable Software and Affected Versions: Small CRM in PHP version 3.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter. This enables the attacker to perform Cross Site Scripting attacks. Recommendations: For Sma...

CVE-2023-44075

Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...

Ransomware reinfections on the rise from improper remediation

Attack. Remediate. Repeat? Speak to any organization infiltrated by ransomware--the most dangerous malware in the world--and theyll be blunt: Theyd do anything to avoid getting hit twice. But ransomware attacks have been ramping up in 2023 and reinfections are occurring all over the globe, forcin...

CVE-2023-43331

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Cross site scripting

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Small CRM Cross-Site Scripting Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A cross-site scripting vulnerability exists in Small CRM version v3.0, which originates from a vulnerability that allows an attacker to execute arbitrary web script or HTML via the name field using a crafted payload injection...

CVE-2023-43331

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2023-43331

CVE-2023-43331 is an XSS in the Add User function of Small CRM v3.0, exploited by injecting crafted payloads into the Name field. Affected: Small CRM v3.0 (Add User/Name field). Root cause: inadequate input sanitization leading to script/HTML execution. Public metrics indicate CVSS v3.1 base scor...

PT-2023-28784

Name of the Vulnerable Software and Affected Versions Small CRM version 3.0 Description A cross-site scripting XSS issue in the Add User function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. Recommendations For Small CRM version 3.0...

CVE-2023-43331: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2023-43331

A cross-site scripting XSS vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Input validation

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

CVE-2023-20250

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

CVE-2023-20250

The CVE-2023-20250 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerability resides in the web-based management interface and stems from improper validation of requests, enabling an authenticated, remote attacker with valid Administrator credentials to execute arb...

CVE-2023-20250

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Stack Overflow Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...