653 matches found
Cross site scripting
Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the e-mail template modules...
CVE-2022-38335
Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the e-mail template modules...
CVE-2022-38335
CVE-2022-38335 affects Vtiger CRM v7.4.0 with a stored XSS vulnerability in the Email Templates module. The root cause is insufficient input filtering/escaping in the module, allowing attacker-supplied data to be stored and later executed in the context of the affected user. The CVSS v3.1 base sc...
CVE-2022-38335
Vtiger CRM v7.4.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the e-mail template modules...
PT-2022-24373 · Vtiger · Vtiger Crm
Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.4.0 Description: A stored cross-site scripting XSS issue was found in the e-mail template modules. This allows for malicious scripts to be stored and executed when the module is accessed. Recommendations: For Vtiger CRM...
Vtiger CRM 跨站脚本漏洞
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. A cross-site scripting vulnerability exists in Vtiger CRM v7.4.0, whic...
Vtiger SQL Injection (CVE-2020-22807)
An SQL injection vulnerability exists in Vtiger. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2020-22807
An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...
CVE-2020-22807
An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...
Sql injection
An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...
CVE-2020-22807
An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...
CVE-2020-22807
Vulnerability summary (CVE-2020-22807) : vtiger CRM 7.2 is affected by a SQL Injection in the calendar exportdata feature caused by a faulty input handling (described as a union SQL injection). This could allow a remote attacker to execute arbitrary SQL commands on the vulnerable system (no authe...
vtiger crm SQL注入漏洞
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in vtiger crm 7.2 that originates from a...
Vtiger CRM Cross-Site Scripting Vulnerability (CNVD-2021-05457)
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. Vtiger CRM v7.2.0 suffers from a cross-site scripting vulnerability th...
Vtiger CRM Path Traversal Vulnerability
Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. Vtiger CRM v7.2.0 suffers from a path traversal vulnerability that can...
CVE-2020-19363
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories...
CVE-2020-19363
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories...
CVE-2020-19362
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page...
CVE-2020-19362
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page...