CVE-2013-5091

The CVE affects vtiger CRM (CalendarCommon.php) where SQL injection is possible via the onlyforuser parameter passed to index.php. Affected: vtiger CRM 5.4.0 and likely earlier. Root cause: insufficient validation of the onlyforuser input leading to arbitrary SQL execution; exploitation requires ...

SQL Injection in vtiger CRM

Advisory ID: HTB23168 Product: vtiger CRM Vendor: vtiger Vulnerable Versions: 5.4.0 and probably prior Tested Version: 5.4.0 Vendor Notification: August 7, 2013 Vendor Patch: September 17, 2013 Public Disclosure: September 18, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference:...

vTiger CRM 5.4.0 - index.php?onlyforuser SQL Injection

vTiger CRM 5.4.0 - index.php?onlyforuser SQL Injection Advisory ID: HTB23168 Product: vtiger CRM Vendor: vtiger Vulnerable Versions: 5.4.0 and probably prior Tested Version: 5.4.0 Vendor Notification: August 7, 2013 Vendor Patch: September 17, 2013 Public Disclosure: September 18, 2013...

vTiger CRM 5.4.0 - 'index.php?onlyforuser' SQL Injection

Advisory ID: HTB23168 Product: vtiger CRM Vendor: vtiger Vulnerable Versions: 5.4.0 and probably prior Tested Version: 5.4.0 Vendor Notification: August 7, 2013 Vendor Patch: September 17, 2013 Public Disclosure: September 18, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference:...

vtiger CRM 5.4.0 SQL Injection Vulnerability

vtiger CRM version 5.4.0 suffers from a remote SQL injection vulnerability. Product: vtiger CRM Vendor: vtiger Vulnerable Versions: 5.4.0 and probably prior Tested Version: 5.4.0 Vendor Notification: August 7, 2013 Vendor Patch: September 17, 2013 Public Disclosure: September 18, 2013 Vulnerabili...

vtiger CRM 5.4.0 SQL Injection

Advisory ID: HTB23168 Product: vtiger CRM Vendor: vtiger Vulnerable Versions: 5.4.0 and probably prior Tested Version: 5.4.0 Vendor Notification: August 7, 2013 Vendor Patch: September 17, 2013 Public Disclosure: September 18, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference:...

CVE-2012-5091

CVE-2012-5091 targets Oracle Agile Product Supplier Collaboration for Process in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0. The documented impact is an unspecified vulnerability affecting confidentiality via unknown vectors related to the Supplier Portal; CVSS v2 base score 4.3 (MEDIUM...

CVE-2010-5091

The CVE-2010-5091 vulnerability affects SilverStripe 2.3.x (before 2.3.8) and 2.4.x (before 2.4.1), where the setName function in filesystem/File.php allows remote authenticated users with CMS author privileges to execute arbitrary PHP code by changing an uploaded file’s extension. Root cause: in...

CVE-2011-5091

GR Board (aka grboard) 1.8.6.5 Community Edition is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via: view.php parameters tableType or blindTarget, view_memo.php parameter delTargets[0], or write_ok.php parameter isReported. The root caus...

Artiphp CMS 5.5.0 - Database Backup Disclosure

Artiphp CMS 5.5.0 - Database Backup Disclosure ?php / Artiphp CMS 5.5.0 Database Backup Disclosure Exploit Vendor: Artiphp Product web page: http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage your website...

CVE-2009-5091

The CVE-2009-5091 entry concerns a SQL injection in the Vlinks Web app (versions 1.0.3 and 1.1.6) affecting page.php via the id parameter. This allows remote attackers to execute arbitrary SQL commands. The CVSS data indicates a High base score (7.5) with network attack vector and low complexity,...

CVE-2009-5091

creationtimestamp| type| source ---|---|--- 2009-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8050...

Novell eDirectory Multiple Vulnerabilities Nov08 - (Windows)

This host is running Novell eDirectory and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbnovelledirmultvulnnov08win.nasl 5370 2017-02-20 15:24:26Z cfi $ Novell eDirectory Multiple Vulnerabilities Nov08 - Windows Authors: Veerendra GG Copyright: Copyright c 2008 Greenbone...

CVE-2008-5091

CVE-2008-5091 affects Novell eDirectory’s LDAP service; a buffer overflow in the extensibleMatch filter can cause an application crash/DoS. Affected: eDirectory 8.7.3 before SP10a and 8.8 before SP3. Remediation: upgrade to SP10a (8.7.3) or SP3 (8.8) as available.

CVE-2007-5091

CVE-2007-5091 concerns multiple cross-site scripting (XSS) vulnerabilities in the web application eGroupWare 1.4.001. The flaws allow remote attackers to inject arbitrary web script or HTML via the cat_data[color] parameter to two PHP components: preferences/inc/class.uicategories.inc.php and adm...