PT-2014-3294

Name of the Vulnerable Software and Affected Versions Fat Free CRM versions prior to 0.12.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via the homepage timeline feature or the activity feature. This is due to multiple SQL injection vulnerabilities in...