CVE-2014-7987

Description

References

• blog.espocrm.com/news/espocrm-2-6-0-released · Patch
• packetstormsecurity.com/files/128888/EspoCRM-2.5.2-XSS-LFI-Access-Control.html · Exploit
• securityfocus.com/archive/1/533844/100/0/threaded
• securityfocus.com/bid/70806
• htbridge.com/advisory/HTB23238 · Exploit

Altre vulnerabilità di espocrm

• CVE-2026-33733ALTO 7.2EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, the admin template management endpoints acce…
• CVE-2026-33656CRITICO 9.1EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, EspoCRM's built-in formula scripting engine …
• CVE-2026-33740MEDIO 5.4EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Email/importEml endpoi…
• CVE-2026-33659BASSO 3.1EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Attachment/fromImageUr…
• CVE-2026-33657MEDIO 5.4EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability …