Codecanyon
Monthly
Authorization bypass in CodeCanyon's TimeCamp Integration for CRM (all versions through 2.8) allows authenticated remote attackers to manipulate the contact_id parameter submitted to the /clients/save_contact endpoint, overwriting or corrupting contact records belonging to other users without owning those records. The flaw is a classic Insecure Direct Object Reference (CWE-639): the application trusts the caller-supplied contact_id without verifying record ownership against the authenticated session. Publicly available exploit code exists on GitHub, materially lowering the barrier to exploitation.
SQL injection in CodeCanyon Perfex CRM up to version 3.4.1 allows authenticated remote attackers to execute arbitrary SQL queries via the Admin Kanban Endpoint's AbstractKanban::applySortQuery function. The vulnerability stems from improper sanitization of the sort query argument and can lead to unauthorized data access, modification, and potential system compromise. Publicly available exploit code exists, increasing real-world risk.
Authorization bypass in CodeCanyon Perfex CRM up to 3.4.1 allows authenticated remote attackers to access projects belonging to other tenants via manipulation of the ID parameter in the Clients::project function. The vulnerability requires valid user credentials but grants access to cross-tenant data with low confidentiality, integrity, and availability impact. Publicly available exploit code exists for this flaw.
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.
Authorization bypass in CodeCanyon's TimeCamp Integration for CRM (all versions through 2.8) allows authenticated remote attackers to manipulate the contact_id parameter submitted to the /clients/save_contact endpoint, overwriting or corrupting contact records belonging to other users without owning those records. The flaw is a classic Insecure Direct Object Reference (CWE-639): the application trusts the caller-supplied contact_id without verifying record ownership against the authenticated session. Publicly available exploit code exists on GitHub, materially lowering the barrier to exploitation.
SQL injection in CodeCanyon Perfex CRM up to version 3.4.1 allows authenticated remote attackers to execute arbitrary SQL queries via the Admin Kanban Endpoint's AbstractKanban::applySortQuery function. The vulnerability stems from improper sanitization of the sort query argument and can lead to unauthorized data access, modification, and potential system compromise. Publicly available exploit code exists, increasing real-world risk.
Authorization bypass in CodeCanyon Perfex CRM up to 3.4.1 allows authenticated remote attackers to access projects belonging to other tenants via manipulation of the ID parameter in the Clients::project function. The vulnerability requires valid user credentials but grants access to cross-tenant data with low confidentiality, integrity, and availability impact. Publicly available exploit code exists for this flaw.
Multiple cross-site scripting (XSS) vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Description fields in a playlist or the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.