Lucene search
K

CVE-2010-3911

🗓️ 26 Nov 2010 19:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 44 Views🌐 WEB

Multiple XSS vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Cvelist
CVE-2010-3911
26 Nov 201019:00
cvelist
EUVD
EUVD-2010-3889
7 Oct 202500:30
euvd
NVD
CVE-2010-3911
26 Nov 201020:00
nvd
Packet Storm
Vtiger CRM 5.2.0 Code Execution / Cross Site Scripting / Local File Inclusion
18 Nov 201000:00
packetstorm
Prion
Cross site scripting
26 Nov 201020:00
prion
securityvulns
Vtiger CRM 5.2.0 Multiple Vulnerabilities
24 Nov 201000:00
securityvulns
NVD
Node
vtigervtiger_crmRange5.2.0
OROROROROROROR
vtigervtiger_crmMatch3.0beta
OROROROROROROROR
vtigervtiger_crmMatch4.2validation
OROROROROROR
vtigervtiger_crmMatch5.0.4rc
OROR
vtigervtiger_crmMatch5.1.0rc
ParameterPositionPathDescriptionCWE
default_user_namequery paramvtigercrm/index.php?module=Users&action=Login&default_user_name=%22%20onmouseover=%22javascript:alert('XSS');Reflected XSS in login form via default_user_name parameterCWE-79
labelquery paramvtigercrm/index.php?module=Settings&action=GetFieldInfo&label=%3Cscript%3Ealert(123)%3C/script%3EReflected XSS via GetFieldInfo label parameterCWE-79
lang_crmquery paramvtigercrm/phprint.php?lang_crm=/../[..]/../etc/passwd%00&module=a&action=a&activity_mode=Local File Inclusion via lang_crm parameter in phprint.phpCWE-79
current_languagequery paramvtigercrm/graph.php?current_language=/../[..]/../etc/passwd%00&module=Accounts&action=Import&parenttab=SupportLocal File Inclusion via current_language parameter in graph.phpCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 01:13Current
6Medium risk
Vulners AI Score6
CVSS 24.3
EPSS0.00365
44