CVE-2023-24203

A Stored Cross-Site Scripting (XSS) vulnerability exists in the SourceCodester Simple Customer Relationship Management (CRM) System v1.0 within the get-quote.php component. The root cause is the lack of proper sanitization and encoding of the company and query parameters; while other inputs are p...

CVE-2023-24204

The SourceCodester Simple Customer Relationship Management System v1.0 is vulnerable to SQL injection in the get-quote.php and admin/login.php components. The root cause is insufficient input validation and a lack of parameterized queries. Specifically, the get-quote.php script fails to adequatel...

CVE-2023-24364

CVE-2023-24364 affects Simple Customer Relationship Management System v1.0. The vulnerability is a SQL injection via the username parameter in the Admin Panel. The CVE is rated high (CVSS v3.1 base score 8.8; AVR: Network; AC: Low; PR: Low; UI: None; C/I/A: High). The connected sources consistent...

CVE-2023-24730

CVE-2023-24730 affects Simple Customer Relationship Management System v1.0. The issue is a SQL injection in the user profile update function via the company parameter, enabling potentially full data compromise (CVSS v3.1 base score 8.8: Confidentiality, Integrity, Availability all High). Connecte...

CVE-2023-24656

CVE-2023-24656 affects Simple Customer Relationship Management System v1.0. The vulnerability is a SQL injection via the subject parameter in the Create Ticket function, caused by unsanitized input. CVSS v3.1 base score 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, LOW privileges,...

CVE-2023-24652

CVE-2023-24652 affects Simple Customer Relationship Management System v1.0. The issue is a SQL injection vulnerability in the Description parameter of the Create ticket function, potentially allowing unauthorized data access/modification. According to the cited metrics, impact is High (C, I, A = ...

CVE-2023-24732

The CVE-2023-24732 entry concerns Simple Customer Relationship Management System v1.0. The vulnerability is a SQL injection in the gender parameter used by the user profile update function, exposed in multiple connected sources. According to the NVD entry, the issue can impact confidentiality, in...

CVE-2023-24729

CVE-2023-24729 affects Simple Customer Relationship Management System v1.0. The SQL injection vulnerability occurs in the address parameter of the user profile update function. The issue is confirmed across multiple sources; CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low attack c...

CVE-2023-24654

Affected product: Simple Customer Relationship Management System v1.0. Vulnerability: SQL injection in the name parameter of the Request a Quote function. Root cause: improper handling of user input enabling SQL injection (no further technical specifics provided). Impact: CVSS v3.1 base score 8.8...

CVE-2023-0917

The CVE-2023-0917 entry concerns SourceCodester Simple Customer Relationship Management System 1.0. The vulnerability affects the login.php component, where manipulation of the Password parameter enables SQL injection. It is exploitable remotely, and multiple sources note the exploit has been dis...

CVE-2023-24651

CVE-2023-24651 affects Simple Customer Relationship Management System v1.0. The registration page exposes a SQL injection in the name parameter, arising from improper handling of user input. Documented impact per CVSSv3.1 shows Network access with Low Confidentiality/Integrity impact and no Avail...

CVE-2023-24728

CVE-2023-24728 affects Simple Customer Relationship Management System v1.0. The vulnerability is a SQL injection in the user profile update function exposed via the contact parameter. Root cause is improper handling of input in the update path, enabling arbitrary SQL execution with high impact (c...

CVE-2023-24653

Affected product: Simple Customer Relationship Management System v1.0. Vulnerability: SQL injection in the Change Password function via the oldpass parameter. Root cause / vector: Vulnerability described as a SQL injection vulnerability stemming from handling of the oldpass input. Impact: CVSS v3...

CVE-2023-24731

CVE-2023-24731 applies to Simple Customer Relationship Management System v1.0. The vulnerability is a SQL injection via a query parameter in the user profile update function. Documented CVSS v3.1 base score is 8.8 (High) with high impact to confidentiality, integrity, and availability. No patch/v...

CVE-2023-24655

CVE-2023-24655 affects Simple Customer Relationship Management System v1.0. A SQL injection flaw exists in the Profile Update function via the name parameter, enabling potentially arbitrary SQL execution. The CVSS 3.1 vector indicates a network attack with no user interaction and requires no priv...