Fat Free CRM 0.11.4
Approved changes feed: RSS · Atom
cpe:2.3:a:fatfreecrm:fat_free_crm:0.11.4:*:*:*:*:*:*:*
part: a version: 0.11.4 update: *
| Vendor | Fatfreecrm (e4026291-a850-599d-8453-4242f6e24704) |
|---|---|
| Product | Fat Free Crm (d943e906-2aac-563b-b35b-d41711d3c072) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/mateerladnam/fat-free-crm |
purl2cpe | 2026-06-01 10:15:43.910217 |
pkg:docker/udalov/fat-free-crm |
purl2cpe | 2026-06-01 10:15:43.910218 |
pkg:gem/fat-free-crm |
purl2cpe | 2026-06-01 10:15:43.910220 |
pkg:github/fatfreecrm/fat-free-crm |
purl2cpe | 2026-06-01 10:15:43.910221 |
pkg:github/fatfreecrm/fat_free_crm |
purl2cpe | 2026-06-01 10:15:43.910222 |
pkg:github/sergio-fry/fat-free-crm |
purl2cpe | 2026-06-01 10:15:43.910224 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5441 |
vulnerable | 2026-06-08 05:05:47.931049 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in app/views/layouts/application.html.haml in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action.
Published: 2014-09-12T14:00:00.000Z
Updated: 2024-08-06T11:41:49.310Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.