Published: 05/09/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 475

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Subscribe to Xrms Crm

Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote malicious users to inject arbitrary web script or HTML via (1) the real name field, related to the user list; (2) the target parameter to login.php, (3) the title parameter to activities/some.php, (4) the company_name parameter to companies/some.php, (5) the last_name parameter to contacts/some.php, (6) the campaign_title parameter to campaigns/some.php, (7) the opportunity_title parameter to opportunities/some.php, (8) the case_title parameter to cases/some.php, (9) the file_id parameter to files/some.php, or (10) the starting parameter to reports/custom/mileage.php, a related issue to CVE-2008-1129.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xrms xrms crm

XRMS suffers from multiple cross site scripting and SQL injection vulnerabilities ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Ex ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Expl ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Exploiting the ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Exploiti ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Exploiting these ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Exploiting these i ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Exploiting t ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Exploi ...

source: wwwsecurityfocuscom/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues The vulnerabilities occur because the application fails to sufficiently sanitize user-supplied data Exploiting ...

CWE-79 http://www.securityfocus.com/bid/31008 http://securityreason.com/securityalert/4229 https://exchange.xforce.ibmcloud.com/vulnerabilities/45142 http://www.securityfocus.com/archive/1/495981/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/69620/xrms-sqlxss.txt.html https://www.exploit-db.com/exploits/32327/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook