CVE-2015-5074

Mô tả

Tham khảo

• packetstormsecurity.com/files/133717/X2Engine-4.2-Arbitrary-File-Upload.html
• seclists.org/fulldisclosure/2015/Sep/92
• securityfocus.com/archive/1/536546/100/0/threaded
• X2Engine/X2CRM commit 10b72bf · Exploit
• exploit-db.com/exploits/38323
• portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-5074 · Exploit

Lỗ hổng khác của x2crm

• CVE-2024-48120TRUNG BÌNH 5.4X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" module. An attacker can inject malicious JavaScript c…
• CVE-2022-48178TRUNG BÌNH 5.4X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action fu…
• CVE-2022-48177TRUNG BÌNH 5.4X2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importMo…
• CVE-2021-33853TRUNG BÌNH 5.4A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a tru…
• CVE-2021-27288TRUNG BÌNH 6.1Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script …