Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
crm vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-2612
Unspecified vulnerability in the Siebel Core - Server OM Svcs component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote malicious users to affect confidentiality via vectors related to LDAP Security Adapter.
Oracle Siebel Crm 15.0
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
NA
CVE-2011-0833
Unspecified vulnerability in the Siebel CRM Core component in Oracle Siebel CRM 7.8.2, 8.0.0, and 8.1.1 allows remote malicious users to affect integrity, related to UIF Client.
Oracle Siebel Crm 7.8.2
Oracle Siebel Crm 8.0.0
Oracle Siebel Crm 8.1.1
NA
CVE-2015-2649
Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.22, and 15.0 allows remote authenticated users to affect confidentiality via vectors related to UIF Open UI.
Oracle Siebel Crm 15.0
Oracle Siebel Crm 8.1.1
Oracle Siebel Crm 8.2.2
NA
CVE-2011-0843
Unspecified vulnerability in the Siebel CRM Core component in Oracle Siebel CRM 7.8.2, 8.0.0, and 8.1.1 allows remote malicious users to affect integrity via unknown vectors related to Globalization - Automotive.
Oracle Siebel Crm 7.8.2
Oracle Siebel Crm 8.0.0
Oracle Siebel Crm 8.1.1
8.8
CVSSv3
CVE-2020-5511
PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.
Small Crm Project Small Crm 2.0
9.8
CVSSv3
CVE-2023-50035
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.
Small Crm Project Small Crm 3.0
5.4
CVSSv3
CVE-2023-45394
Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an malicious user to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover.
Small Crm Project Small Crm 3.0
NA
CVE-2014-5520
SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote malicious users to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php.
Xrms Crm Project Xrms Crm 1.99.2
1 EDB exploit
NA
CVE-2014-5521
plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter.
Xrms Crm Project Xrms Crm 1.99.2
1 EDB exploit
5.4
CVSSv3
CVE-2022-47073
A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject parameter.
Small Crm Project Small Crm 3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802
template injection
CVE-2024-0044
code injection
CVE-2024-35474
CVE-2024-27857
CVE-2024-23251
CVE-2024-23692
physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »