Shodan
Vulnerabilities
Vulnerable Software
Yetiforce:  >> Yetiforce Customer Relationship Management  >> 4.2.0  Security Vulnerabilities
CVE-2023-49508
Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.
CVSS Score
6.5
EPSS Score
0.001
Published
2024-02-16
CVE-2022-3002
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
5.4
EPSS Score
0.01
Published
2022-10-06
CVE-2022-3005
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
5.4
EPSS Score
0.001
Published
2022-09-20
CVE-2022-3004
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
6.3
EPSS Score
0.001
Published
2022-09-20
CVE-2022-3000
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
6.3
EPSS Score
0.001
Published
2022-09-20
CVE-2022-2924
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.
CVSS Score
7.1
EPSS Score
0.01
Published
2022-09-20
CVE-2022-2829
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
8.8
EPSS Score
0.001
Published
2022-08-23
CVE-2022-2890
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
9.0
EPSS Score
0.001
Published
2022-08-22
CVE-2022-1340
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
7.0
EPSS Score
0.001
Published
2022-08-22
CVE-2022-2885
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
6.7
EPSS Score
0.001
Published
2022-08-21


Products
Pricing
Contact Us

Shodan ® - All rights reserved