Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
crm vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2015-2587
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote malicious users to affect integrity via vectors related to SWSE Server Infrastructure.
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 15.0
3.5
CVSSv2
CVE-2015-2600
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 15.0
4.3
CVSSv2
CVE-2015-2612
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote malicious users to affect confidentiality via vectors related to LDAP Security Adapter.
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 15.0
3.5
CVSSv2
CVE-2015-2649
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.22, and 15.0 allows remote authenticated users to affect confidentiality via vectors related to UIF Open UI.
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
Oracle Siebel Crm 15.0
NA
CVE-2023-44075
Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote malicious user to execute arbitrary code via a crafted payload to the Address parameter.
Small Crm Project Small Crm 3.0
NA
CVE-2023-43331
A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Small Crm Project Small Crm 3.0
NA
CVE-2023-50035
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.
Small Crm Project Small Crm 3.0
NA
CVE-2023-34650
PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).
Small Crm Project Small Crm 1.0
7.5
CVSSv2
CVE-2014-5520
SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote malicious users to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php.
Xrms Crm Project Xrms Crm 1.99.2
1 EDB exploit
6.5
CVSSv2
CVE-2020-5511
PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.
Small Crm Project Small Crm 2.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675
CVE-2024-3400
CVE-2024-23557
mass assignment
CVE-2023-1389
local file inclusion
CVE-2024-32596
file upload
CVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »