Vulnerabilities > Espocrm > Espocrm > 6.1.7

DATE CVE VULNERABILITY TITLE RISK
2023-12-05 CVE-2023-46736 Unspecified vulnerability in Espocrm
EspoCRM is an Open Source CRM (Customer Relationship Management) software.
network
low complexity
espocrm
6.5
2023-11-30 CVE-2023-5965 Unspecified vulnerability in Espocrm
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.
network
low complexity
espocrm
7.2
2023-11-30 CVE-2023-5966 Unspecified vulnerability in Espocrm
An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution.
network
low complexity
espocrm
7.2