Sql injection

2019-05-2418:29:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.8%

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.

CPENameOperatorVersion
vtiger_crmeq6.5.0

CPE	Name	Operator	Version
	vtiger_crm	eq	6.5.0

References

blog.ripstech.com/2016/vtiger-sql-injection/

demo.ripstech.com/projects/vtiger_6.5.0