Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Iwcn Component: Stark Crm Clear all filters
TI-2014-08171 CVE-2014-10009 · GHSA-4j3w-g5x5-mf2m

Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) notes parameter to the client page; (4) ins…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01815 Published 2015-01-13 No fix listed CWE-79
TI-2014-08170 CVE-2014-10008 · GHSA-cvjm-jx7m-3jqc

Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote…

Priority LOW 33

Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authentication of administrators for requests that add (1) an administrator via a crafted request to the ad…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01415 Published 2015-01-13 No fix listed CWE-352