Vulnerabilities > Espocrm > Espocrm > 5.6.4
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-12-05 | CVE-2023-46736 | Server-Side Request Forgery (SSRF) vulnerability in Espocrm EspoCRM is an Open Source CRM (Customer Relationship Management) software. | 6.5 |
2023-11-30 | CVE-2023-5965 | Unrestricted Upload of File with Dangerous Type vulnerability in Espocrm An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution. | 7.2 |
2023-11-30 | CVE-2023-5966 | Unrestricted Upload of File with Dangerous Type vulnerability in Espocrm An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution. | 7.2 |
2021-08-04 | CVE-2021-3539 | Cross-site Scripting vulnerability in Espocrm EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. | 3.5 |
2019-08-05 | CVE-2019-14550 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.9. | 3.5 |
2019-08-05 | CVE-2019-14549 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.9. | 3.5 |
2019-08-05 | CVE-2019-14548 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.9. | 3.5 |
2019-08-05 | CVE-2019-14547 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.9. | 3.5 |
2019-08-05 | CVE-2019-14546 | Cross-site Scripting vulnerability in Espocrm An issue was discovered in EspoCRM before 5.6.9. | 3.5 |
2019-07-28 | CVE-2019-14351 | Improper Restriction of Excessive Authentication Attempts vulnerability in Espocrm 5.6.4 EspoCRM 5.6.4 is vulnerable to user password hash enumeration. | 4.0 |