vtiger CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
This exploit allows an attacker to bypass ASLR and DEP protections in Microsoft Office Word 2007. The exploit takes advantage of a confusion in the RTF object handling. The attacker can execute arbitrary code, such as a Windows message box, on the target machine.
This module exploits PS Client Automation, by sending a remote service install and creating a callback payload.
Exploiting these issues can allow an attacker to hijack a user's session and gain unauthorized access to the affected application, or run malicious HTML or JavaScript code, potentially allowing the attacker to steal cookie-based authentication credentials, and control how the site is rendered to the user; other attacks are also possible.
The vtiger CRM software is prone to multiple cross-site scripting vulnerabilities due to insufficient sanitization of user-supplied input. An attacker can exploit these vulnerabilities to execute arbitrary script code in the context of the affected site, potentially leading to the theft of authentication credentials and other malicious activities.
vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Phorum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Netvolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
This exploit allows an attacker to perform a blind SQL injection attack on the XOOPS Module Core's viewcat.php script. By manipulating the 'cid' parameter, the attacker can extract sensitive information from the database, such as usernames and passwords.
This exploit allows an attacker to perform a remote Denial of Service (DOS) attack on a target system. It sends a specially crafted HTTP request to the target, causing it to become unresponsive or crash.
Services By CQR