CVE-2023-3058

A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230560.

• CWE-79
• CWE-79

• https://gitee.com/07fly/FLY-CRM/issues/I76K4NExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230560Third Party Advisory
• https://vuldb.com/?id.230560Third Party Advisory
• https://gitee.com/07fly/FLY-CRM/issues/I76K4NExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230560Third Party Advisory
• https://vuldb.com/?id.230560Third Party Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3057A vulnerability was found in YFCMF up to 3.0.4. It has been …9.8
• CVE-2023-30570pluto in Libreswan before 4.11 allows a denial of service (r…7.5
• CVE-2023-30571Libarchive through 3.6.2 can cause directories to have world…5.3
• CVE-2023-30575Apache Guacamole 1.5.1 and older may incorrectly calculate t…7.5
• CVE-2023-30576Apache Guacamole 0.9.10 through 1.5.1 may continue to refere…8.1
• CVE-2023-30577AMANDA (Advanced Maryland Automatic Network Disk Archiver) b…7.8
• CVE-2023-30581The use of __proto__ in process.mainModule.__proto__.require…7.5
• CVE-2023-30582A vulnerability has been identified in Node.js version 20, a…5.3
• CVE-2023-30583fs.openAsBlob() can bypass the experimental permission model…7.5
• CVE-2023-30584A vulnerability has been discovered in Node.js version 20, s…7.7
• CVE-2023-30585A vulnerability has been identified in the Node.js (.msi ver…7.5
• CVE-2023-30586A privilege escalation vulnerability exists in Node.js 20 th…7.5