CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

EUVD-2016-1748

Malware in sbrugna...

CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

Sql injection

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2016-10754

CVE-2016-10754 affects Vtiger CRM 6.5.0, specifically the file modules/Calendar/Activity.php. The vulnerability is an SQL injection via the contactidlist parameter due to lack of validation of externally entered SQL statements. The documented impact is the ability to execute arbitrary SQL in the ...

CVE-2016-10754: Improper Neutralization of Special Elements used in an SQL Command

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

PT-2019-7550

Name of the Vulnerable Software and Affected Versions Vtiger CRM version 6.5.0 Description The issue allows SQL injection via the contactidlist parameter in the modules/Calendar/Activity.php file. Recommendations For Vtiger CRM version 6.5.0, avoid using the contactidlist parameter in the affecte...