Vulnerabilities > F Revocrm

DATE CVE VULNERABILITY TITLE RISK
2023-09-06 CVE-2023-41149 OS Command Injection vulnerability in F-Revocrm 7.3.7/7.3.8
F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability.
network
low complexity
f-revocrm CWE-78
critical
9.8
2023-09-06 CVE-2023-41150 Cross-site Scripting vulnerability in F-Revocrm
F-RevoCRM 7.3 series prior to version7.3.8 contains a cross-site scripting vulnerability.
network
low complexity
f-revocrm CWE-79
5.4
2020-01-27 CVE-2019-6036 Cross-site Scripting vulnerability in F-Revocrm 6.0/6.5
Cross-site scripting vulnerability in F-RevoCRM 6.0 to F-RevoCRM 6.5 patch6 (version 6 series) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
f-revocrm CWE-79
6.1