6 matches found
CVE-2016-10754
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...
8.8CVSS8.1AI score0.01461EPSS
SaveExploits1References1
EUVD-2016-1748
Malware in sbrugna...
8.8CVSS8.8AI score0.01461EPSS
SaveExploits1References3
Sql injection
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...
6.5CVSS8.3AI score0.01461EPSS
SaveExploits1References2Affected Software1
CVE-2016-10754
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...
8.8CVSS9.1AI score0.01461EPSS
SaveExploits1References2
CVE-2016-10754
CVE-2016-10754 affects Vtiger CRM 6.5.0, specifically the file modules/Calendar/Activity.php. The vulnerability is an SQL injection via the contactidlist parameter due to lack of validation of externally entered SQL statements. The documented impact is the ability to execute arbitrary SQL in the ...
8.8CVSS9AI score0.01461EPSS
SaveExploits1References2Affected Software1
20