Salesagility vulnerabilities
40 CVEs and advisories name Salesagility as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-50335Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM
- CVE-2024-50333RCE in ModuleBuilder in SuiteCRM
- CVE-2024-50332Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM
- CVE-2024-49774ModuleScanner flaws in SuiteCRM
- CVE-2024-49773Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SuiteCRM
- CVE-2024-49772Authenticated SQL injection in AM_ProjectTemplates controller in SuiteCRM
- CVE-2024-45392SuiteCRM has wrong deletion permission checks on API delete call
- CVE-2024-36419SuiteCRM-Core Host Header Injection in /legacy
- CVE-2024-36418SuiteCRM authenticated RCE using connectors
- CVE-2024-36416SuiteCRM v4 API Excessive log data DOS
- CVE-2024-36417SuiteCRM Stored XSS Vulnerability Allows Code Execution via Malicious iFrame
- CVE-2024-36415SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution
- CVE-2024-36414SuiteCRM authenticated Server-Side Request Forgery
- CVE-2024-36413SuiteCRM authenticated Reflected Cross-Site Scripting
- CVE-2024-36412SuiteCRM unauthenticated SQL Injection
- CVE-2024-36411SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller
- CVE-2024-36410SuiteCRM authenticated SQL Injection in EmailUIAjax messages count controller
- CVE-2024-36409SuiteCRM authenticated SQL Injection in TreeData entrypoint
- CVE-2024-36408SuiteCRM authenticated SQL Injection in Alerts
- CVE-2024-36407SuiteCRM unauthenticated user password reset on php7
- CVE-2024-36406SuiteCRM vulnerable to open redirects
- CVE-2023-47643SuiteCRM has Unauthenticated Graphql Introspection Enabled
- CVE-2023-6131Code Injection in salesagility/suitecrm
- CVE-2023-6130Path Traversal: '\..\filename' in salesagility/suitecrm
- CVE-2023-6128Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm
- CVE-2023-6127Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm
- CVE-2023-6126Code Injection in salesagility/suitecrm
- CVE-2023-6125Code Injection in salesagility/suitecrm
- CVE-2023-6124Server-Side Request Forgery (SSRF) in salesagility/suitecrm
- CVE-2023-5353Improper Access Control in salesagility/suitecrm