CVE-2023-49508
Published Feb 16, 2024Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license…
Vendor archive
yetiforce CVEs
Beta · best-effort18 CVEs tagged to vendor yetiforce — 0 Critical, 1 High, 17 Medium, 0 Low, 0 Unrated.
CVE-2022-3002
Published Oct 6, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-3005
Published Sep 20, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-3004
Published Sep 20, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-3000
Published Sep 20, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-2924
Published Sep 20, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.
CVE-2022-2829
Published Aug 23, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-2890
Published Aug 22, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-1340
Published Aug 22, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-2885
Published Aug 21, 2022Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-1411
Published May 5, 2022Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retrieve the stored data fr…
CVE-2022-0269
Published Jan 24, 2022Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.
CVE-2021-4121
Published Dec 16, 2021yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4117
Published Dec 15, 2021yetiforcecrm is vulnerable to Business Logic Errors
CVE-2021-4116
Published Dec 15, 2021yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4111
Published Dec 15, 2021yetiforcecrm is vulnerable to Business Logic Errors
CVE-2021-4107
Published Dec 14, 2021yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-4092
Published Dec 11, 2021yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)
Showing 1-18 of 18 CVEsPage 1 of 1