Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

civicrm civicrm 4.2.8 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4662
The Quick Search API in CiviCRM 4.2.0 up to and including 4.2.9 and 4.3.0 up to and including 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to conta...
Civicrm Civicrm 4.2.8Civicrm Civicrm 4.2.9Civicrm Civicrm 4.3.1Civicrm Civicrm 4.2.5Civicrm Civicrm 4.2.7Civicrm Civicrm 4.3.3Civicrm Civicrm 4.2.0Civicrm Civicrm 4.2.1Civicrm Civicrm 4.2.2Civicrm Civicrm 4.3.0Civicrm Civicrm 4.3.2Civicrm Civicrm 4.2.4Civicrm Civicrm 4.2.6
NA
CVE-2013-5957
Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM prior to 4.2.12, 4.3.x prior to 4.3.7, and 4.4.x prior to 4.4.beta4 allow remote malicious users to execute arbitrary SQL commands via the _value parameter to (1) ajax/jqState or (2) ajax/jqcount...
Civicrm Civicrm 4.4.0Civicrm Civicrm 4.4Civicrm CivicrmCivicrm Civicrm 4.2.10Civicrm Civicrm 4.2.5Civicrm Civicrm 4.2.4Civicrm Civicrm 4.2.2Civicrm Civicrm 4.2.1Civicrm Civicrm 4.2.9Civicrm Civicrm 4.2.7Civicrm Civicrm 4.2.8Civicrm Civicrm 4.2.6Civicrm Civicrm 4.2.0Civicrm Civicrm 4.3.3Civicrm Civicrm 4.3.4Civicrm Civicrm 4.3.5Civicrm Civicrm 4.3.6Civicrm Civicrm 4.3.1Civicrm Civicrm 4.3.0Civicrm Civicrm 4.3.2
NA
CVE-2013-1636
Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin prior to 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 up to and including 4.2.9 and 4.3.0 u...
Blair Williams Pretty Link Lite 1.6.0Blair Williams Pretty Link Lite 1.6.1Blair Williams Pretty Link LiteJoobi Com Jnews 8.0.1Civicrm Civicrm 4.3.1Civicrm Civicrm 3.1.1Civicrm Civicrm 3.1.2Civicrm Civicrm 3.2.2Civicrm Civicrm 3.2.3Civicrm Civicrm 3.3.6Civicrm Civicrm 3.4.0Civicrm Civicrm 4.1.5Civicrm Civicrm 4.1.6Civicrm Civicrm 4.2.7Civicrm Civicrm 4.2.8Civicrm Civicrm 4.3.3Civicrm Civicrm 3.1.0Civicrm Civicrm 3.2.0Civicrm Civicrm 3.2.1Civicrm Civicrm 3.3.3Civicrm Civicrm 3.3.5Civicrm Civicrm 4.1.3
NA
CVE-2013-4661
CiviCRM 2.0.0 up to and including 4.2.9 and 4.3.0 up to and including 4.3.3 does not properly enforce role-based access control (RBAC) restrictions for default custom searches, which allows remote authenticated users with the "access CiviCRM" permission to bypass intend...
Civicrm Civicrm 2.0.0Civicrm Civicrm 2.2.1Civicrm Civicrm 2.2.2Civicrm Civicrm 2.2.3Civicrm Civicrm 2.2.5Civicrm Civicrm 3.1.4Civicrm Civicrm 3.1.5Civicrm Civicrm 3.1.6Civicrm Civicrm 3.2.0Civicrm Civicrm 4.3.1Civicrm Civicrm 4.3.2Civicrm Civicrm 4.3.3Civicrm Civicrm 4.0.5Civicrm Civicrm 4.2.7Civicrm Civicrm 4.2.8Civicrm Civicrm 4.2.9Civicrm Civicrm 2.0.1Civicrm Civicrm 2.0.3Civicrm Civicrm 2.1.2Civicrm Civicrm 2.1.6Civicrm Civicrm 2.2.7Civicrm Civicrm 2.2.9
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook