321 matches found
CVE-2023-36289
Webkul QloApps 1.6.0 is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability that allows an attacker to obtain a user’s session cookie and impersonate the user via POST email_create and back parameter. Impact: potential session hijacking and user impersonation. Remediation: app...
CVE-2023-36289
An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST emailcreate and back parameter...
CVE-2023-36288
The CVE-2023-36288 issue affects Webkul QloApps v1.6.0 and is an unauthenticated Cross-Site Scripting (XSS) flaw in the configure parameter of a GET request. The underlying risk is that an attacker can steal a user’s session cookie and impersonate that user. There is no explicit evidence of explo...
CVE-2023-36289: Improper Neutralization of Input During Web Page Generation
An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST emailcreate and back parameter...
CVE-2023-36289
An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST emailcreate and back parameter...
CVE-2023-36284
An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter datefrom, dateto, and idproduct allows a remote attacker to bypass a web application's authentication and authorization mechanisms and retrieve the contents of an entire database...
CVE-2023-2925
A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible ...
Cross site scripting
A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible ...
CVE-2023-2925
Webkul krayin crm 1.2.4 contains a cross-site scripting (XSS) vulnerability in the Edit Person Page component, via manipulation of the Organization parameter in /admin/contacts/organizations/edit/2. It is exploitable remotely and the exploit has been disclosed. Exploitation could affect users who...
CVE-2023-2925 Webkul krayin crm Edit Person Page 2 cross site scripting
A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible ...
CVE-2023-2925: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible ...
Webkul Software Krayin CRM 跨站脚本漏洞
Webkul Software Krayin CRM is a free and open source CRM solution for small and medium-sized businesses from Webkul Software India. A cross-site scripting vulnerability exists in Webkul Software Krayin CRM version 1.2.4, which stems from an issue in the file /admin/contacts/organizations/edit/2,...
PT-2023-22223 · Webkul · Webkul Krayin Crm
Name of the Vulnerable Software and Affected Versions: Webkul krayin crm version 1.2.4 Description: A problematic issue was found in the Edit Person Page component, specifically affecting the /admin/contacts/organizations/edit/2 file. The manipulation of the Organization argument leads to...
Webkul Qloapps 1.5.2 Cross Site Scripting
Exploit Title: Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Date: 15 May 2023 Exploit Author: Astik Rawat ahrixia Vendor Homepage: https://qloapps.com/ Software Link: https://github.com/webkul/hotelcommerce Version: 1.5.2 Tested on: Kali Linux 2022.4 CVE : CVE-2023-30256 Description: A Cross...
Webkul Qloapps 1.5.2 - Cross-Site Scripting (XSS)
Exploit Title: Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Date: 15 May 2023 Exploit Author: Astik Rawat ahrixia Vendor Homepage: https://qloapps.com/ Software Link: https://github.com/webkul/hotelcommerce Version: 1.5.2 Tested on: Kali Linux 2022.4 CVE : CVE-2023-30256 Description: A Cross...
Webkul Qloapps 1.5.2 - Cross-Site Scripting Vulnerability
Exploit Title: Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Exploit Author: Astik Rawat ahrixia Vendor Homepage: https://qloapps.com/ Software Link: https://github.com/webkul/hotelcommerce Version: 1.5.2 Tested on: Kali Linux 2022.4 CVE : CVE-2023-30256 Description: A Cross Site Scripting XSS...
Exploit for Cross-site Scripting in Webkul Qloapps
Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Webkul QloAp...
GHSA-V829-J9RR-85V9 Cross-site Scripting in krayin/laravel-crm
Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting XSS...
