Skip to content
Noroxi

dimo-crm records

4 published records for vendor dimo-crm.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2019-14768
    36Monitor

    An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new W

    HighCVSS 8.8No exploitEPSS 4%

    dimo-crm · yellowbox crmJan 21, 2020

  • CVE-2019-14765
    35Monitor

    Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use adminis

    HighCVSS 8.8No exploitEPSS 1%

    dimo-crm · yellowbox crmJan 21, 2020

  • CVE-2019-14767
    30Monitor

    In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an una

    HighCVSS 7.5No exploitEPSS 1%

    dimo-crm · yellowbox crmJan 21, 2020

  • CVE-2019-14766
    26Monitor

    Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem.

    MediumCVSS 6.5No exploitEPSS 1%

    dimo-crm · yellowbox crmJan 21, 2020