İçeriğe atla
Noroxi

Vtiger kayıtları

vtiger üreticisine ait 72 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
6 · %8,3
Pre-auth RCE
13
Düzeltme kaydı olan
%1,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

72 kayıt
  • CVE-2013-3214
    64Bu hafta

    vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    vtiger · vtiger crm28 Oca 2020

  • CVE-2013-3215
    60Bu hafta

    vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession

    KritikCVSS 9,8SilahlaştırılmışEPSS %69

    vtiger · vtiger crm29 Oca 2020

  • CVE-2013-3591
    48Planlayın

    vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability

    YüksekCVSS 8,8SilahlaştırılmışEPSS %43

    vtiger · vtiger crm7 Şub 2020

  • CVE-2015-6000
    47Planlayın

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDeta

    YüksekCVSS 8,8SilahlaştırılmışEPSS %40

    vtiger · vtiger crm6 Şub 2020

  • CVE-2009-3250
    39İzleyin

    The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbi

    KritikCVSS 9,0Kavram kanıtıEPSS %11

    vtiger · vtiger crm18 Eyl 2009

  • CVE-2020-22807
    39İzleyin

    An issue was dicovered in vtiger crm 7.2.

    KritikCVSS 9,8İstismar yokEPSS %1

    vtiger · vtiger crm29 Nis 2021

  • CVE-2024-44779
    38İzleyin

    A reflected cross-site scripting (XSS) vulnerability in the viewname parameter in the index page of vTiger CRM 7.4.0 allows attackers to exe

    KritikCVSS 9,6İstismar yokEPSS %1

    vtiger · vtiger crm29 Ağu 2024

  • CVE-2024-44778
    38İzleyin

    A reflected cross-site scripting (XSS) vulnerability in the parent parameter in the index page of vTiger CRM 7.4.0 allows attackers to execu

    KritikCVSS 9,6İstismar yokEPSS %1

    vtiger · vtiger crm29 Ağu 2024

  • CVE-2024-44777
    38İzleyin

    A reflected cross-site scripting (XSS) vulnerability in the tag parameter in the index page of vTiger CRM 7.4.0 allows attackers to execute

    KritikCVSS 9,6İstismar yokEPSS %1

    vtiger · vtiger crm29 Ağu 2024

  • CVE-2009-3258
    37İzleyin

    vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters

    KritikCVSS 9,0İstismar yokEPSS %2

    vtiger · vtiger crm18 Eyl 2009

  • CVE-2016-10754
    35İzleyin

    modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.

    YüksekCVSS 8,8İstismar yokEPSS %1

    vtiger · vtiger crm24 May 2019

  • CVE-2023-38891
    35İzleyin

    SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    vtiger · vtiger crm14 Eyl 2023

  • CVE-2019-11057
    35İzleyin

    SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands.

    YüksekCVSS 8,8İstismar yokEPSS %1

    vtiger · vtiger crm17 May 2019

  • CVE-2019-19202
    35İzleyin

    In Vtiger 7.x before 7.2.0, the My Preferences saving functionality allows a user without administrative privileges to change his own role b

    YüksekCVSS 8,8İstismar yokEPSS %1

    vtiger · vtiger crm21 Kas 2019

  • CVE-2016-1713
    34İzleyin

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDeta

    YüksekCVSS 7,3SilahlaştırılmışEPSS %17

    vtiger · vtiger crm14 Nis 2017

  • CVE-2013-3212
    34İzleyin

    vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files

    YüksekCVSS 8,1Kavram kanıtıEPSS %8

    vtiger · vtiger crm28 Oca 2020

  • CVE-2007-3599
    34İzleyin

    vtiger CRM before 5.0.3 allows remote authenticated users to import and export the information for a contact even when they only have the Vi

    YüksekCVSS 8,5İstismar yokEPSS %1

    vtiger · vtiger crm6 Tem 2007

  • CVE-2009-3249
    33İzleyin

    Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    vtiger · vtiger crm18 Eyl 2009

  • CVE-2016-4834
    33İzleyin

    modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticat

    YüksekCVSS 8,1İstismar yokEPSS %2

    vtiger · vtiger crm31 Tem 2016

  • CVE-2024-42995
    33İzleyin

    VTiger CRM <= 8.1.0 does not correctly check user privileges.

    YüksekCVSS 8,3İstismar yokEPSS %0

    vtiger · vtiger crm16 Ağu 2024

  • CVE-2006-5289
    32İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %8

    vtiger · vtiger crm13 Eki 2006

  • CVE-2023-46304
    32İzleyin

    modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected

    YüksekCVSS 8,1Kavram kanıtıEPSS %2

    vtiger · vtiger crm30 Nis 2024

  • CVE-2019-5009
    31İzleyin

    Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG fo

    YüksekCVSS 7,2Kavram kanıtıEPSS %10

    vtiger · vtiger crm4 Oca 2019

  • CVE-2013-3213
    31İzleyin

    Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the (1

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    vtiger · vtiger crm2 Nis 2014

  • CVE-2005-3819
    31İzleyin

    Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass auth

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    vtiger · vtiger crm25 Kas 2005