Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2018-9283] CremeCRM 1.6.12 - Multiple Vulnerabilities

bishopfox.com | vulnerability | CVE-2018-9283 | #vulnerability | #stored-xss | #cremecrm | #link-manipulation | #cve-2018-9283 | #crm

Summary

CremeCRM 1.6.12 has 29 stored XSS instances across contact, salesman and invoice pages plus a reflected link manipulation issue; upgrade to version 1.8.0 to remediate.
Published
Collected

original ↗

Related coverage

  1. Dolibarr Version 9.0.1 — Multiple Vulnerabilities (bishopfox.com)
  2. Cantemo Portal Version 3.8.4 - Cross-Site Scripting (bishopfox.com)
  3. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  4. [CVE-2026-90894] ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell (jfrog.com)
  5. CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know (wiz.io)
  6. Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments (wiz.io)

back