repository icon
yetiforcecompany / yetiforcecrm Project repository

Our team created for you one of the most innovative CRM systems that supports mainly business processes and allows for customization according to your needs. Be ahead of your competition and implement YetiForce!

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN4 DAYS

FIX

WITHIN21 DAYS

Document content disclosure to unauthenticated users
c4v4r0n
informative
High
Misconfigured Cross Origin Resource Sharing with wildcard
popcorn94
pending
Using insecure pseudo random number generators for password reset functionality....
tsarsecurity
pending
User can get details of the comments that were deleted
irfansayyed-github
Medium
Error content is leak
uonghoangminhchau
not applicable
Cookie without Secure attribute
uonghoangminhchau
duplicate
Medium
Cookie without HTTPOnly flag
uonghoangminhchau
not applicable
Persistent Cross Site Scripting - WidgetsManagement Module - Settings
thanhlocstudent
High
•CVE-2022-2924
Persistent Cross Site Scripting - BusinessHours Module - Settings
thanhlocstudent
Medium
•CVE-2022-3002
Persistent Cross Site Scripting - LayoutEditor Module - Settings
thanhlocstudent
Medium
•CVE-2022-3000
Persistent Cross-site Scripting - SlaPolicy Module - Settingss
thanhlocstudent
Medium
•CVE-2022-3005
Persistent Cross Site Scripting - Workflow Module - Settings
thanhlocstudent
Medium
•CVE-2022-3004
Cross-site Scripting (XSS) - Stored
thanhlocstudent
Critical
•$15•CVE-2022-2890
Stored XSS in 'Table name' field via Database information function
0xb4c
Medium
•CVE-2022-2885
Stored XSS vulnerability when importing RSS Feeds from external source
0xb4c
High
•$10•CVE-2022-2829
Unrestructed file upload
aravindd007
Critical
•$15•CVE-2022-1411
Cross-site Scripting (XSS) - Stored
aravindd007
High
•$10•CVE-2022-1340
Cross-Site Request Forgery (CSRF)
supernaruto16
High
•$15•CVE-2022-0269
Cross-site Scripting (XSS) - Stored
laladee
Medium
•$24•CVE-2021-4121
Business Logic Errors
khanhchauminh
High
•$30•CVE-2021-4117
Cross-site Scripting (XSS) - Stored
aravindd007
Medium
•$15•CVE-2021-4116
Business Logic Errors
dev696
High
•$30•CVE-2021-4111
Cross-site Scripting (XSS) - Reflected
dev696
Medium
•$15•CVE-2021-4107
Cross-Site Request Forgery (CSRF)
khanhchauminh
Medium
•$15•CVE-2021-4092