CVE-2011-5213

2012-10-2517:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

JSON

Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php.