CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

EUVD-2016-1748

Malware in sbrugna...

Sql injection

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2016-10754

CVE-2016-10754 affects Vtiger CRM 6.5.0, specifically the file modules/Calendar/Activity.php. The vulnerability is an SQL injection via the contactidlist parameter due to lack of validation of externally entered SQL statements. The documented impact is the ability to execute arbitrary SQL in the ...

CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2016-10754: Improper Neutralization of Special Elements used in an SQL Command

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...