CVE-2019-14472

Description

References

• code610.blogspot.com/2019/07/xss-in-zurmo-crm.html · Exploit

zurmo 的其他漏洞

• CVE-2018-19596中危 4.8Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.
• CVE-2018-19506中危 4.8Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.