Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

browsercrm vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2011-5213
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id ...
Browsercrm Browsercrm 5.001.00Browsercrm Browsercrm 5.000.01Browsercrm Browsercrm 4.624.60Browsercrm Browsercrm 4.624.50Browsercrm Browsercrm 4.616.00Browsercrm Browsercrm 4.615.11Browsercrm Browsercrm 4.615.10Browsercrm Browsercrm 4.604.01Browsercrm Browsercrm 5.000.00Browsercrm Browsercrm 4.999.20Browsercrm Browsercrm 4.624.01Browsercrm Browsercrm 4.624.00Browsercrm Browsercrm 4.614.00Browsercrm Browsercrm 4.612.00Browsercrm BrowsercrmBrowsercrm Browsercrm 4.691.01Browsercrm Browsercrm 4.624.90Browsercrm Browsercrm 4.622.00Browsercrm Browsercrm 4.620.01Browsercrm Browsercrm 4.611.01Browsercrm Browsercrm 4.610.00Browsercrm Browsercrm 5.100.00
4.3
CVSSv2
CVE-2011-5214
Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) modules/admin/admin_module_index.php, or (3) modules/calendar/customise_cal...
Browsercrm Browsercrm 4.999.20Browsercrm Browsercrm 4.691.01Browsercrm Browsercrm 4.622.00Browsercrm Browsercrm 4.620.01Browsercrm Browsercrm 4.612.00Browsercrm Browsercrm 4.611.01Browsercrm BrowsercrmBrowsercrm Browsercrm 5.100.00Browsercrm Browsercrm 4.624.90Browsercrm Browsercrm 4.624.80Browsercrm Browsercrm 4.619.00Browsercrm Browsercrm 4.617.00Browsercrm Browsercrm 4.610.00Browsercrm Browsercrm 4.607.00Browsercrm Browsercrm 5.002.00Browsercrm Browsercrm 5.001.00Browsercrm Browsercrm 4.624.70Browsercrm Browsercrm 4.624.60Browsercrm Browsercrm 4.616.00Browsercrm Browsercrm 4.615.11Browsercrm Browsercrm 4.605.00Browsercrm Browsercrm 4.604.01
4.3
CVSSv2
CVE-2006-0521
Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote malicious users to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag.
Browsercrm Browsercrm
9.3
CVSSv2
CVE-2008-2690
Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter to (1) kb.php, (2) login.php, (3) index.php, (4) contact_view.php, and ...
Browsercrm Browsercrm 5.002.00
10
CVSSv2
CVE-2008-2689
PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote malicious users to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter.
Browsercrm Browsercrm 5.002.00
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook