Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the parenttab parameter in an index action to the Products module, as reachable through index.php; (2) the user_password parameter in an Authenticate action to the Users module, as reachable through index.php; or (3) the query_string parameter in a UnifiedSearch action to the Home module, as reachable through index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
vtiger CRM多个跨站脚本漏洞
Vulnerability Description
vtiger CRM是基于web的开源客户关系管理系统。 vtiger CRM实现上存在漏洞，远程攻击者可以通过向vtiger CRM的多个模块提交恶意的认证或查询请求执行跨站脚本攻击。 1) 当module设置为Users且action设置为Authenticate的时候，index.php文件没有正确的验证对user_password参数的输入便返回给了用户，可能导致在用户浏览器会话中执行任意HTML和脚本代码。 2) 当module设置为Products且action设置为index的时候，inde
CVSS Information
N/A
Vulnerability Type
N/A