Vendor
low
advisory
Privilege Escalation in Webkul Krayin CRM via SVG XSS
1 rule 2 TTPs 1 CVECVE-2025-3568 allows an authenticated low-privileged user to perform an administrative account takeover in Krayin CRM 2.0.0 and 2.1.0 by leveraging SVG-based XSS to bypass password verification controls.
Krayin CRM
web-application
privilege-escalation
xss
csrf
1r
2t
1c
high
threat
CVE-2017-20262 — Joomla! Component Ajax Quiz SQL Injection
1 rule 3 TTPsAn unauthenticated SQL injection vulnerability, CVE-2017-20262, in Joomla! Component Ajax Quiz version 1.8 allows attackers to execute arbitrary SQL queries by injecting malicious code through the `cid` parameter in GET requests to `index.php` with `option=com_ajaxquiz` and `view=ajaxquiz`, leading to extraction of sensitive database information.
exploited
Ajax Quiz 1.8
sql-injection
web-vulnerability
joomla
cve
1r
3t