Skip to content
OpenAdvisories

Vendor

salesagility

40 known vulnerabilities.

Products

SuiteCRM 22 salesagility/suitecrm 14 salesagility/suitecrm-core 2 SuiteCRM-Core 2
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 4.9
    CVE-2024-50335 Public exploit

    Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting (XSS), allowing an attacker to inject malicious J…

    salesagility SuiteCRM
  • Medium 6.6
    CVE-2024-50333

    RCE in ModuleBuilder in SuiteCRM

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. User input is not validated and is written to the filesystem. The ParserLabel::addLabels() function can be used to write attacker-controlled data into th…

    salesagility SuiteCRM
  • Medium 5.3
    CVE-2024-49773

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Poor input validation in export allows authenticated user do a SQL injection attack. User-controlled input is used to build SQL query. `current_post` par…

    salesagility SuiteCRM
  • Medium 4.3
    CVE-2024-36419

    SuiteCRM-Core Host Header Injection in /legacy

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. A vulnerability in versions prior to 8.6.1 allows for Host Header Injection when directly accessing the `/legacy` route. Version 8.6.1 contains a patch for the issue.

    salesagility SuiteCRM-Core
  • Medium 5.7
    CVE-2024-36417

    SuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, an unverified IFrame can be added some some inputs, which could allow for a cross-site scripting attack. Versions 7.14.4 and 8.6.1 cont…

    salesagility SuiteCRM
  • Medium 5.4
    CVE-2024-36406

    SuiteCRM vulnerable to open redirects

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, unchecked input allows for open re-direct. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

    salesagility SuiteCRM
  • Medium 6.8
    CVE-2023-6128

    Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm

    Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

    salesagility salesagility/suitecrm
  • Medium 5.4
    CVE-2023-6127

    Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm

    Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

    salesagility salesagility/suitecrm
  • Medium 4.3
    CVE-2023-6126

    Code Injection in salesagility/suitecrm

    Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

    salesagility salesagility/suitecrm
  • Medium 5.4
    CVE-2023-6125

    Code Injection in salesagility/suitecrm

    Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.

    salesagility salesagility/suitecrm
  • Medium 5.0
    CVE-2023-6124

    Server-Side Request Forgery (SSRF) in salesagility/suitecrm

    Server-Side Request Forgery (SSRF) in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14.

    salesagility salesagility/suitecrm
  • Medium 6.4
    CVE-2023-5350 Public exploit

    SQL Injection in salesagility/suitecrm

    SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1.

    salesagility salesagility/suitecrm
  • Medium 4.3
    CVE-2023-1034 EPSS 26%

    Path Traversal: '\..\filename' in salesagility/suitecrm

    Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9.

    salesagility salesagility/suitecrm
  • Medium 5.4
    CVE-2022-0756

    Missing Authorization in salesagility/suitecrm

    Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.

    salesagility salesagility/suitecrm