suitecrm vulnerabilities (Bitnami)
74 vulnerabilities.
-
suitecrmBitnami SuiteCRM: Legacy iCal service allows unauthenticated access to meeting data 5.3 Medium -
suitecrmBitnami An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of... 8.1 High -
suitecrmBitnami An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload... 8.8 High -
suitecrmBitnami Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM 4.9 Medium -
suitecrmBitnami RCE in ModuleBuilder in SuiteCRM 6.6 Medium -
suitecrmBitnami Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM 8.8 High -
suitecrmBitnami ModuleScanner flaws in SuiteCRM 7.2 High -
suitecrmBitnami Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM 5.3 Medium -
suitecrmBitnami Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM 8.8 High -
suitecrmBitnami SuiteCRM has wrong deletion permission checks on API delete call 7.7 High -
suitecrmBitnami SuiteCRM-Core Host Header Injection in /legacy 4.3 Medium -
suitecrmBitnami SuiteCRM authenticated RCE using connectors 8.6 High -
suitecrmBitnami SuiteCRM v4 API Excessive log data DOS 8.6 High -
suitecrmBitnami SuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame 5.7 Medium -
suitecrmBitnami SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution 9.1 Critical -
suitecrmBitnami SuiteCRM authenticated Server-Side Request Forgery 7.7 High -
suitecrmBitnami SuiteCRM authenticated Reflected Cross-Site Scripting 8.9 High -
suitecrmBitnami SuiteCRM unauthenticated SQL Injection 10.0 Critical -
suitecrmBitnami SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller 9.6 Critical -
suitecrmBitnami SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller 9.6 Critical -
suitecrmBitnami SuiteCRM authenticated SQL Injection in TreeData entrypoint 9.6 Critical -
suitecrmBitnami SuiteCRM authenticated SQL Injection in Alerts 9.6 Critical -
suitecrmBitnami SuiteCRM unauthenticated user password reset on php7 3.7 Low -
suitecrmBitnami SuiteCRM vulnerable to open redirects 5.4 Medium -
suitecrmBitnami Suite CRM v7.14.2 - RCE via Local File Inclusion 9.9 Critical -
suitecrmBitnami Suite CRM v7.14.2 - SSRF 5.0 Medium -
suitecrmBitnami SuiteCRM has Unauthenticated Graphql Introspection Enabled 3.1 Low -
suitecrmBitnami Code Injection in salesagility/suitecrm 7.2 High -
suitecrmBitnami Path Traversal: '\..\filename' in salesagility/suitecrm 7.5 High -
suitecrmBitnami Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm 6.8 Medium -
suitecrmBitnami Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm 5.4 Medium -
suitecrmBitnami Code Injection in salesagility/suitecrm 4.3 Medium -
suitecrmBitnami Code Injection in salesagility/suitecrm 5.4 Medium -
suitecrmBitnami Server-Side Request Forgery (SSRF) in salesagility/suitecrm 5.0 Medium -
suitecrmBitnami Improper Access Control in salesagility/suitecrm 8.1 High -
suitecrmBitnami Cross-site Scripting (XSS) - Stored in salesagility/suitecrm 8.9 High -
suitecrmBitnami SQL Injection in salesagility/suitecrm 6.4 Medium -
suitecrmBitnami Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core 8.1 High -
suitecrmBitnami Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core 7.6 High -
suitecrmBitnami Path Traversal: '\..\filename' in salesagility/suitecrm 4.3 Medium -
suitecrmBitnami SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected... 7.2 High -
suitecrmBitnami SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users... 8.8 High -
suitecrmBitnami SQL Injection in salesagility/suitecrm 7.1 High -
suitecrmBitnami Missing Authorization in salesagility/suitecrm 5.4 Medium -
suitecrmBitnami Missing Authorization in salesagility/suitecrm 7.1 High -
suitecrmBitnami SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote... 9.8 Critical -
suitecrmBitnami SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion. 9.8 Critical -
suitecrmBitnami SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution. 8.8 High -
suitecrmBitnami SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the... 8.8 High -
suitecrmBitnami A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35,... 6.1 Medium - Show olderLoading…