EUVD-2015-5321

Malware in sbrugna...

Zurmo CRM Cross-Site Scripting Vulnerability (CNVD-2017-08089)

Zurmo CRM is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. Zurmo CRM suffers from a cross-site scripting attack vulnerability that stems from the program failing to adequately validate user input. An attacker could use this vulnerabili...

CVE-2015-5365

Cross-site scripting XSS vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?" profile field...

Cross site scripting

Cross-site scripting XSS vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?" profile field...

CVE-2015-5365

CVE-2015-5365 : Zurmo CRM 3.0.2 contains a cross-site scripting (XSS) vulnerability exploitable by remote authenticated users via the "What’s going on?" profile field. The underlying issue is improper input handling in that field, allowing injection of arbitrary web script/HTML. The connected rec...

CVE-2015-5365

Cross-site scripting XSS vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?" profile field...

Zurmo CRM 3.0.2 Cross Site Scripting

​ Affected software: zurmo crm Type of vulnerability:xss stored URL:zurmo.com http://demo.zurmo.com/ Discovered by: provensec Website: provensec.com version:N/A Proof of concept​ goto profile section http://demo.zurmo.com/demos/stable/app/index.php/home/default and edit the whats going on field...

Zurmo CRM 2.8.5 Cross Site Scripting

Zurmo CRM 2.8.5 Multiple Reflected Cross-Site Scripting Vulnerabilities Vendor: Zurmo Inc. Product web page: http://www.zurmo.org Affected version: 2.8.5 Summary: Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. Desc: Zurmo CRM suffers...

Zurmo CRM 2.8.5 Multiple Reflected Cross-Site Scripting Vulnerabilities

Summary Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. Description Zurmo CRM suffers from multiple reflected cross-site scripting vulnerabilities. The issues are triggered when input passed via several GET parameters to several scrip...

Zurmo CRM 2.8.5 Multiple Reflected Cross Site Scripting Vulnerabilities

Zurmo CRM version 2.8.5 suffers from multiple reflective cross site scripting vulnerabilities. Zurmo CRM 2.8.5 Multiple Reflected Cross-Site Scripting Vulnerabilities Vendor: Zurmo Inc. Product web page: http://www.zurmo.org Affected version: 2.8.5 Summary: Zurmo is an Open Source Customer...

Zurmo CRM - 储存型XSS

No description provided by source. Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored URL:...

Zurmo CRM - Persistent XSS Vulnerability

Exploit for php platform in category web applications Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS...

Zurmo CRM - Persistent Cross-Site Scripting

Zurmo CRM - Persistent Cross-Site Scripting Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored UR...

Zurmo CRM - Persistent Cross-Site Scripting

Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored URL: zurmo.com Discovered by: Provensec Websit...