Approved changes feed: RSS · Atom

cpe:2.3:a:browsercrm:browsercrm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBrowsercrm (77e28bcf-3a5c-5a7f-a42a-cc0a28f8f38b)
ProductBrowsercrm (aac44ff2-e1ea-5053-a2bc-6cd0ad999572)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5214 vulnerable 2026-06-08 04:59:35.142081 Details available
Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) modules/admin/admin_module_index.php, or (3) modules/calendar/customise_calendar_times.php; login[] parameter to (4) index.php or (5) pub/clients.php; or framed parameter to (6) licence/index.php or (7) licence/view.php.
Published: 2012-10-25T17:00:00.000Z
Updated: 2024-08-07T00:30:46.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5213 vulnerable 2026-06-08 04:59:35.124734 Details available
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php.
Published: 2012-10-25T17:00:00.000Z
Updated: 2024-08-07T00:30:46.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0521 vulnerable 2026-06-08 04:48:54.247350 Details available
Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag.
Published: 2006-02-02T11:00:00.000Z
Updated: 2024-08-07T16:41:28.429Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.