CVE-2022-22112

概要

参考情報

• Bottelet/DaybydayCRM · Third Party Advisory
• whitesourcesoftware.com/vulnerability-database/CVE-2022-22112 · Exploit

daybyday のその他の脆弱性

• CVE-2022-22113高 8.8In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed b…
• CVE-2020-35707中 5.4Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen.
• CVE-2020-35706中 5.4Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen.
• CVE-2020-35705中 5.4Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen.
• CVE-2020-35704中 5.4Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen.