Code injection

vtiger CRM before 5.0.3 allows remote authenticated users to import and export the information for a contact even when they only have the View permission...

CVE-2000-1017

The CVE-2000-1017 entry concerns Webteachers Webdata (WebData database). The vulnerability allows remote attackers who have valid WebData accounts to read arbitrary files by submitting a request to import a file into the WebData database. The description specifies the attack flow but does not pro...