Best Software Saleslogix
7 CVEs affecting Best Software Saleslogix. Latest disclosed: 2004-10-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2004-1611 | | 2004-10-18 | SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary S… | |
CVE-2004-1610 | | 2004-10-18 | SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute co… | |
CVE-2004-1609 | | 2004-10-18 | SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain ac… | |
CVE-2004-1608 | | 2004-10-18 | SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation. | |
CVE-2004-1607 | | 2004-10-18 | slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter… | |
CVE-2004-1606 | | 2004-10-18 | slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive… | |
CVE-2004-1605 | | 2004-10-14 | SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator. |