Lucene search

72crm Security Vulnerabilities

cve

CVE-2022-37178

An issue was discovered in 72crm 9.0. There is a SQL Injection vulnerability in View the task calendar.

8.8CVSS

9AI Score

0.001EPSS

2022-08-24 05:15 PM

cve

CVE-2022-37181

72crm 9.0 has an Arbitrary file upload vulnerability.

9.8CVSS

9.4AI Score

0.002EPSS

2022-08-24 05:15 PM

cve

CVE-2022-46610

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

8.8CVSS

8.9AI Score

0.001EPSS

2023-01-10 02:15 PM