Simple Customer Relationship Management System vulnerabilities

11 known vulnerabilities in Simple Customer Relationship Management System from Oretnom23. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

11vulnerabilities

1critical

10high

0exploited

8.9average CVSS score

Latest first

9.8 Critical severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24655Mar 23, 2023Oretnom23EPSS 1.02%
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24732Mar 15, 2023Oretnom23EPSS 1.01%
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24731Mar 15, 2023Oretnom23EPSS 1.01%
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24730Mar 15, 2023Oretnom23EPSS 1.05%
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24729Mar 15, 2023Oretnom23EPSS 1.05%
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24728Mar 15, 2023Oretnom23EPSS 1.01%
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24656Feb 27, 2023Oretnom23EPSS 1.05%
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24654Feb 27, 2023Oretnom23EPSS 1.05%
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Request a Quote function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24653Feb 27, 2023Oretnom23EPSS 1.05%
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24652Feb 27, 2023Oretnom23EPSS 1.05%
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function.
8.8 High severity
Simple Customer Relationship Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-24364Feb 27, 2023Oretnom23EPSS 1.05%
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel.