CVE-2014-7985

概要

参考情報

• blog.espocrm.com/news/espocrm-2-6-0-released · Patch
• packetstormsecurity.com/files/128888/EspoCRM-2.5.2-XSS-LFI-Access-Control.html · Exploit
• securityfocus.com/archive/1/533844/100/0/threaded
• securityfocus.com/bid/70809 · Exploit
• htbridge.com/advisory/HTB23238 · Exploit

espocrm のその他の脆弱性

• CVE-2026-33733高 7.2EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, the admin template management endpoints acce…
• CVE-2026-33656緊急 9.1EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, EspoCRM's built-in formula scripting engine …
• CVE-2026-33740中 5.4EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Email/importEml endpoi…
• CVE-2026-33659低 3.1EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Attachment/fromImageUr…
• CVE-2026-33657中 5.4EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability …