techexcel inc vulnerabilities

Products

• devtrack 2
• back office 1
• customerwise 1

Latest techexcel inc CVEs

Newest publication first

1. CVE-2024-8601 Improper Access Control Vulnerability in TechExcel Back Office Software

   Published 2024-09-09

   High·CVSS 8.7 EPSS 0.49%

   This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to...

2. CVE-2007-4882 Multiple cross-site scripting (XSS) vulnerabilities in TechExcel CustomerWise (formerly TechExcel CRM) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

   Published 2007-09-14

   Medium·CVSS 4.3 EPSS 1.0%

   Multiple cross-site scripting (XSS) vulnerabilities in TechExcel CustomerWise (formerly TechExcel CRM) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

3. CVE-2007-0853 SQL injection vulnerability in DevTrack 6.0.3 allows remote attackers to execute arbitrary SQL commands via the Username form field. NOTE: the provenance of this information is unknown; the details ar...

   Published 2007-02-08

   High·CVSS 7.5 EPSS 1.2%

   SQL injection vulnerability in DevTrack 6.0.3 allows remote attackers to execute arbitrary SQL commands via the Username form field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

4. CVE-2007-0852 Cross-site scripting (XSS) vulnerability in DevTrack 6.x allows remote attackers to inject arbitrary web script or HTML via the "Keyword search" form field and unspecified other form fields that popul...

   Published 2007-02-08

   Medium·CVSS 6.8 EPSS 1.2%

   Cross-site scripting (XSS) vulnerability in DevTrack 6.x allows remote attackers to inject arbitrary web script or HTML via the "Keyword search" form field and unspecified other form fields that populate a public saved query. NOTE: the provenance of this information is unknown; t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.