civicrm vulnerabilities (Debian)
7 vulnerabilities.
-
civicrmDebian CiviCRM CiviCRM - SQL Injection 8.8 High -
civicrmDebian A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting... 6.1 Medium -
civicrmDebian Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1,... 5.4 Medium -
civicrmDebian Snappy vulnerable to PHAR deserialization, allowing remote code execution 9.8 Critical -
civicrmDebian In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form... 4.3 Medium -
civicrmDebian In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and... 8.8 High -
civicrmDebian PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in... 9.8 Critical