Show filters
717 Total Results
Displaying 341-350 of 717
Sort by:
Attacker Value
Unknown
CVE-2020-8786
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 4 of 4).
0
Attacker Value
Unknown
CVE-2020-8783
Disclosure Date: March 16, 2020 (last updated February 21, 2025)
SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection (issue 1 of 4).
0
Attacker Value
Unknown
CVE-2020-9016
Disclosure Date: February 16, 2020 (last updated February 21, 2025)
Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.
0
Attacker Value
Unknown
CVE-2020-8804
Disclosure Date: February 13, 2020 (last updated February 21, 2025)
SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.
0
Attacker Value
Unknown
CVE-2020-8800
Disclosure Date: February 13, 2020 (last updated February 21, 2025)
SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.
0
Attacker Value
Unknown
CVE-2020-8803
Disclosure Date: February 13, 2020 (last updated February 21, 2025)
SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.
0
Attacker Value
Unknown
CVE-2020-8802
Disclosure Date: February 13, 2020 (last updated February 21, 2025)
SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.
0
Attacker Value
Unknown
CVE-2020-8801
Disclosure Date: February 13, 2020 (last updated February 21, 2025)
SuiteCRM through 7.11.11 allows PHAR Deserialization.
0
Attacker Value
Unknown
CVE-2013-3591
Disclosure Date: February 07, 2020 (last updated February 21, 2025)
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
0
Attacker Value
Unknown
CVE-2015-6000
Disclosure Date: February 06, 2020 (last updated February 21, 2025)
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in test/logo/.
0
