Skip to content
OpenAdvisories

Product · CodeCanyon

Perfex CRM

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3

    CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection

    A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function AbstractKanban::applySortQuery of the file application/services/AbstractKanban.php of the component Admin Kanban Endpoint. This manipulation of the argument th…

  • Medium 6.3

    CodeCanyon Perfex CRM Tenant Clients.php project authorization

    A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass.…