perfexcrm kayıtları

perfexcrm üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

13 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
43Planlayın	CVE-2017-17976Kavram kanıtı	In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.perfexcrm · perfex crm · CWE-434 Girişsiz RCE Dosya yükleme	Kritik9,8	—	%12,5	26 Oca 2018
21İzleyin	CVE-2020-28961İstismar yok	Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the compperfexcrm · perfex crm · CWE-79 XSS	Orta5,4	—	%0,5	22 Eki 2021
21İzleyin	CVE-2021-40303Kavram kanıtı	perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.perfexcrm · perfex crm · CWE-79 XSS	Orta5,4	—	%0,5	8 Kas 2022
21İzleyin	CVE-2024-8867İstismar yok	Perfex CRM Parameter Clients.php cross site scriptingperfexcrm · perfex crm · CWE-79 XSS	Orta5,3	—	%0,4	14 Eyl 2024
21İzleyin	CVE-2024-44851İstismar yok	A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web sperfexcrm · perfex crm · CWE-79 RCE XSS	Orta5,4	—	%0,3	11 Eyl 2024
21İzleyin	CVE-2025-10342İstismar yok	HTML injection in Perfex CRMperfexcrm · perfex crm · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,2	29 Eyl 2025
21İzleyin	CVE-2025-10341İstismar yok	HTML injection in Perfex CRMperfexcrm · perfex crm · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,2	29 Eyl 2025
21İzleyin	CVE-2025-10343İstismar yok	HTML injection in Perfex CRMperfexcrm · perfex crm · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,2	29 Eyl 2025
21İzleyin	CVE-2025-10344İstismar yok	HTML injection in Perfex CRMperfexcrm · perfex crm · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,2	29 Eyl 2025
21İzleyin	CVE-2025-10345İstismar yok	HTML injection in Perfex CRMperfexcrm · perfex crm · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,2	29 Eyl 2025
21İzleyin	CVE-2025-10346İstismar yok	HTML injection in Perfex CRMperfexcrm · perfex crm · CWE-79 Kimlik doğrulamasız XSS	Orta5,3	—	%0,1	29 Eyl 2025
20İzleyin	CVE-2025-3219İstismar yok	CodeCanyon Perfex CRM Project Discussions Module 2 cross site scriptingperfexcrm · perfex crm · CWE-79 XSS	Orta5,1	—	%0,3	4 Nis 2025
20İzleyin	CVE-2025-2974İstismar yok	CodeCanyon Perfex CRM Contracts contract cross site scriptingperfexcrm · perfex crm · CWE-79 XSS	Orta5,1	—	%0,3	31 Mar 2025

CVE-2017-17976
43Planlayın
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
KritikCVSS 9,8Kavram kanıtıEPSS %12
- Girişsiz RCE
- Dosya yükleme
perfexcrm · perfex crm26 Oca 2018
CVE-2020-28961
21İzleyin
Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the comp
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
perfexcrm · perfex crm22 Eki 2021
CVE-2021-40303
21İzleyin
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.
OrtaCVSS 5,4Kavram kanıtıEPSS %0
- XSS
perfexcrm · perfex crm8 Kas 2022
CVE-2024-8867
21İzleyin
Perfex CRM Parameter Clients.php cross site scripting
OrtaCVSS 5,3İstismar yokEPSS %0
- XSS
perfexcrm · perfex crm14 Eyl 2024
CVE-2024-44851
21İzleyin
A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web s
OrtaCVSS 5,4İstismar yokEPSS %0
- RCE
- XSS
perfexcrm · perfex crm11 Eyl 2024
CVE-2025-10342
21İzleyin
HTML injection in Perfex CRM
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
perfexcrm · perfex crm29 Eyl 2025
CVE-2025-10341
21İzleyin
HTML injection in Perfex CRM
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
perfexcrm · perfex crm29 Eyl 2025
CVE-2025-10343
21İzleyin
HTML injection in Perfex CRM
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
perfexcrm · perfex crm29 Eyl 2025
CVE-2025-10344
21İzleyin
HTML injection in Perfex CRM
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
perfexcrm · perfex crm29 Eyl 2025
CVE-2025-10345
21İzleyin
HTML injection in Perfex CRM
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
perfexcrm · perfex crm29 Eyl 2025
CVE-2025-10346
21İzleyin
HTML injection in Perfex CRM
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
perfexcrm · perfex crm29 Eyl 2025
CVE-2025-3219
20İzleyin
CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
perfexcrm · perfex crm4 Nis 2025
CVE-2025-2974
20İzleyin
CodeCanyon Perfex CRM Contracts contract cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
perfexcrm · perfex crm31 Mar 2025