Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
salesagility suitecrm vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-1034
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm before 7.12.9.
Salesagility Suitecrm
801
VMScore
CVE-2021-42840
SuiteCRM prior to 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled PHP file under the web root, because only the all-lowercase PHP fi...
Salesagility Suitecrm
NA
CVE-2023-5350
SQL Injection in GitHub repository salesagility/suitecrm before 7.14.1.
Salesagility Suitecrm
NA
CVE-2023-5351
Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm before 7.14.1.
Salesagility Suitecrm
NA
CVE-2023-5353
Improper Access Control in GitHub repository salesagility/suitecrm before 7.14.1.
Salesagility Suitecrm
383
VMScore
CVE-2018-15606
An XSS issue exists in SalesAgility SuiteCRM 7.x prior to 7.8.21 and 7.10.x prior to 7.10.8, related to phishing an error message.
Salesagility Suitecrm
534
VMScore
CVE-2021-25960
In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability (Formula Injection). A low privileged attacker can use accounts module to inject payloads in the input fields. When an administ...
Salesagility Suitecrm
668
VMScore
CVE-2019-14454
SuiteCRM 7.11.x and 7.10.x prior to 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.
Salesagility Suitecrm
445
VMScore
CVE-2021-41595
SuiteCRM prior to 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionality.
Salesagility Suitecrm
445
VMScore
CVE-2021-41596
SuiteCRM prior to 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.
Salesagility Suitecrm
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
CVE-2023-52162
CVE-2024-23670
CVE-2024-5404
man-in-the-middle
CVE-2024-5214
CVE-2024-4358
CVE-2024-20696
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »