CVE-2024-42994

VTiger CRM = 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection in the "CompanyDetails" operation of the "MailManager" module...

CVE-2024-42994

VTiger CRM = 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection in the "CompanyDetails" operation of the "MailManager" module...

PT-2024-30247 · Vtiger · Vtiger Crm

Name of the Vulnerable Software and Affected Versions: VTiger CRM versions = 8.1.0 Description: The issue arises from improper sanitization of user input before it is used in a SQL statement, leading to a SQL Injection in the CompanyDetails operation of the MailManager module. Recommendations: Fo...