Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
egix vulnerabilities and exploits
(subscribe to this query)
8.1
CVSSv3
CVE-2013-3212
vtiger CRM 5.4.0 and previous versions contain local file-include vulnerabilities in 'customerportal.php' which allows remote malicious users to view files and execute local script code.
Vtiger Vtiger Crm
1 EDB exploit
NA
CVE-2013-3213
Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 up to and including 5.4.0 allow remote malicious users to execute arbitrary SQL commands via the (1) picklist_name parameter in the get_picklists method to soap/customerportal.php, (2) where parameter in the get_tickets_l...
Vtiger Vtiger Crm 5.0.0
Vtiger Vtiger Crm 5.4.0
Vtiger Vtiger Crm 5.0.4
Vtiger Vtiger Crm 5.0.1
Vtiger Vtiger Crm 5.2.0
Vtiger Vtiger Crm 5.1.0
Vtiger Vtiger Crm 5.0.3
Vtiger Vtiger Crm 5.3.0
Vtiger Vtiger Crm 5.2.1
Vtiger Vtiger Crm 5.0.2
1 EDB exploit
9.8
CVSSv3
CVE-2013-3215
vtiger CRM 5.4.0 and previous versions contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.
Vtiger Vtiger Crm
1 EDB exploit
NA
CVE-2014-5298
FileUploadsFilter.php in X2Engine 4.1.7 and previous versions, when running on case-insensitive file systems, allows remote malicious users to bypass the upload blacklist and conduct unrestricted file upload attacks by uploading a file with an executable extension that contains u...
X2engine X2engine
NA
CVE-2012-5223
The proc_deutf function in includes/functions_vbseocp_abstract.php in vBSEO 3.5.0, 3.5.1, 3.5.2, 3.6.0, and previous versions allows remote malicious users to insert and execute arbitrary PHP code via "complex curly syntax" in the char_repl parameter, which is inserted ...
Crawlability Vbseo 3.5.0
Crawlability Vbseo 3.3.0
Crawlability Vbseo 3.0.0
Crawlability Vbseo 2.3.0
Crawlability Vbseo 2.2.0
Crawlability Vbseo 3.1.0
Crawlability Vbseo 3.5.1
Crawlability Vbseo 3.6.0
Crawlability Vbseo 3.2.0
Crawlability Vbseo 2.0.0
Crawlability Vbseo
Crawlability Vbseo 3.5.2
Crawlability Vbseo 2.4.5
Crawlability Vbseo 2.4.0
Crawlability Vbseo 3.3.1
Crawlability Vbseo 2.1.1
Crawlability Vbseo 2.1.0
1 EDB exploit
NA
CVE-2007-6656
SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the templateid parameter.
Cmsmadesimple Cms Made Simple
1 EDB exploit
NA
CVE-2013-2749
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-3528. Reason: This candidate is a reservation duplicate of CVE-2013-3528. Notes: All CVE users should reference CVE-2013-3528 instead of this candidate. All references and descriptions in this candidate have ...
1 EDB exploit
NA
CVE-2011-5075
translate.php in Support Incident Tracker (aka SiT!) 3.45 up to and including 3.65 allows remote malicious users to obtain sensitive information via a direct request using the save action, which reveals the installation path.
Sitracker Support Incident Tracker 3.61
Sitracker Support Incident Tracker 3.62
Sitracker Support Incident Tracker 3.63
Sitracker Support Incident Tracker 3.64
Sitracker Support Incident Tracker 3.65
Sitracker Support Incident Tracker 3.45
Sitracker Support Incident Tracker 3.50
Sitracker Support Incident Tracker 3.6
Sitracker Support Incident Tracker 3.51
Sitracker Support Incident Tracker 3.60
1 EDB exploit
NA
CVE-2011-4337
Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 up to and including 3.65 allows remote malicious users to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable.
Sitracker Support Incident Tracker 3.6
Sitracker Support Incident Tracker 3.60
Sitracker Support Incident Tracker 3.61
Sitracker Support Incident Tracker 3.62
Sitracker Support Incident Tracker 3.45
Sitracker Support Incident Tracker 3.50
Sitracker Support Incident Tracker 3.64
Sitracker Support Incident Tracker 3.63
Sitracker Support Incident Tracker 3.51
Sitracker Support Incident Tracker 3.65
1 EDB exploit
NA
CVE-2014-5297
The actionSendErrorReport method in protected/controllers/SiteController.php in X2Engine 2.8 up to and including 4.1.7 allows remote malicious users to conduct PHP object injection and Server-Side Request Forgery (SSRF) attacks via crafted serialized data in the report parameter.
X2engine X2engine 4.1.7
X2engine X2engine 2.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »