CVE-2015-5074

概要

参考情報

• packetstormsecurity.com/files/133717/X2Engine-4.2-Arbitrary-File-Upload.html
• seclists.org/fulldisclosure/2015/Sep/92
• securityfocus.com/archive/1/536546/100/0/threaded
• X2Engine/X2CRM commit 10b72bf · Exploit
• exploit-db.com/exploits/38323
• portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-5074 · Exploit

x2crm のその他の脆弱性

• CVE-2024-48120中 5.4X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject malicious JavaScript c…
• CVE-2022-48178中 5.4X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action fu…
• CVE-2022-48177中 5.4X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importMo…
• CVE-2021-33853中 5.4A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a tru…
• CVE-2021-27288中 6.1Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script …