Cross-site Scripting in DayByDay CRM

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-22109 · ADVISORY
• Bottelet/DaybydayCRM commit 002dc75 · WEB
• Bottelet/DaybydayCRM · PACKAGE
• whitesourcesoftware.com/vulnerability-database/CVE-2022-22109 · WEB

Lỗ hổng khác của bottelet/flarepoint

• CVE-2022-22111CAO 8.8In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permissio…
• CVE-2022-22110CAO 7.5In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to u…
• CVE-2022-22108TRUNG BÌNH 4.3In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (e…
• CVE-2022-22107TRUNG BÌNH 4.3In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (e…