Lucene search
+L

551 matches found

Nuclei
Nuclei
added 2026/08/29 10:07 a.m.67 views

Vtiger CRM v7.2.0 - Directory Listing

Vtiger CRM v7.2.0 contains a directory traversal vulnerability caused by improper access controls in /libraries and /layout directories, letting attackers display hidden files and list directories, exploit requires no authentication. id: CVE-2020-19363 info: name: Vtiger CRM v7.2.0 - Directory...

6.5CVSS6.6AI score0.03613EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/08/28 10:05 a.m.3 views

VTIGER-CRM-RCE-CVE-2026-23698

Este repositorio nao tem um README...

8.6CVSS7.1AI score0.01226EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/28 10:05 a.m.4 views

VTIGER-CRM-RCE-CVE-2026-23697

Questo repository non contiene un README...

8.8CVSS7.2AI score0.00999EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 9:20 a.m.2 views

CVE-2023-46304

CVE-2023-46304 Esecuzione di codice in modalità remota autenticata in VTiger Open Source CRM v7.5 Riepilogo Esiste una vulnerabilità nel modulo Users della versione attuale di VTiger CRM Open Source 7.5.0 che consente a un utente autenticato di scrivere ed eseguire codice PHP arbitrario in...

8.1CVSS5.3AI score0.01658EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 9:20 a.m.3 views

CVE-2023-38891

CVE-2023-38891 Authentifizierte SQL-Injection-Schwachstelle in VTiger Open Source CRM v7.5 Entdeckt von: Jacob Elliott 07/13/23 Zusammenfassung Im Reports-Modul von VTiger CRM v7.5.0 gibt es eine unzureichende Überprüfung der ausgewählten Felder für den Bericht, die gespeichert und später beim...

8.8CVSS8.1AI score0.00946EPSS
SaveExploits0
NVD
NVD
added 2026/07/07 5:16 p.m.28 views

CVE-2026-23698

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

8.6CVSS0.01226EPSS
SaveExploits2References3
NVD
NVD
added 2026/07/07 5:16 p.m.27 views

CVE-2026-23697

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

8.8CVSS0.00999EPSS
SaveExploits2References3
ATTACKERKB
ATTACKERKB
added 2026/07/07 4:17 p.m.18 views

CVE-2026-23697

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

8.8CVSS6.8AI score0.00999EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2026/07/07 4:17 p.m.43 views

CVE-2026-23697 Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

8.8CVSS0.00999EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2026/07/07 4:17 p.m.9 views

CVE-2026-23697 Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

8.8CVSS6.8AI score0.00999EPSS
SaveExploits2References3
CVE
CVE
added 2026/07/07 4:17 p.m.39 views

CVE-2026-23697

Vtiger CRM before 8.4.0 is vulnerable to an authenticated file upload RCE via the Documents module. An attacker with low privileges can upload a .phar file containing arbitrary PHP code, bypassing the extension denylist in config.inc.php (which omits .phar). The uploaded file is stored with its o...

8.8CVSS6.8AI score0.00999EPSS
SaveExploits2References3
EUVD
EUVD
added 2026/07/07 4:10 p.m.15 views

EUVD-2026-42054

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

8.6CVSS6.7AI score0.01226EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2026/07/07 4:10 p.m.48 views

CVE-2026-23698 Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

8.6CVSS0.01226EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2026/07/07 4:10 p.m.11 views

CVE-2026-23698 Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

8.6CVSS6.7AI score0.01226EPSS
SaveExploits2References3
CVE
CVE
added 2026/07/07 4:10 p.m.48 views

CVE-2026-23698

Vtiger CRM up to 8.4.0 is affected by an authenticated remote code execution vulnerability in the admin ModuleManager import feature. A privileged administrator can upload a crafted ZIP archive which is extracted directly into the web root’s modules/ directory without proper file-type validation ...

8.6CVSS6.7AI score0.01226EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.13 views

CVE-2025-70936

Vtiger CRM 8.4.0 contains a reflected cross-site scripting XSS vulnerability in the MailManager module. Improper handling of user-controlled input in the folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s...

5.4CVSS5.7AI score0.00138EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/13 9:30 p.m.15 views

EUVD-2025-209429

Vtiger CRM 8.4.0 contains a reflected cross-site scripting XSS vulnerability in the MailManager module. Improper handling of user-controlled input in the folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s...

5.7AI score0.00138EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/13 12:00 a.m.5 views

CVE-2026-26460

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...

5.9AI score0.00163EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/13 12:00 a.m.24 views

CVE-2026-26460

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...

0.00163EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/13 12:00 a.m.19 views

Vtiger CRM 安全漏洞

Vtiger CRM is a customer relationship management system developed by Vtiger Corporation in the United States, based on SugarCRM. This system provides functions for managing, collecting, and analyzing customer information. Version Vtiger CRM 8.4.0 has a security vulnerability that stems from...

6.1CVSS5.8AI score0.00163EPSS
SaveExploits0References2
Rows per page
Query Builder