CVE-2016-10754: Improper Neutralization of Special Elements used in an SQL Command

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

PT-2019-7550

Name of the Vulnerable Software and Affected Versions Vtiger CRM version 6.5.0 Description The issue allows SQL injection via the contactidlist parameter in the modules/Calendar/Activity.php file. Recommendations For Vtiger CRM version 6.5.0, avoid using the contactidlist parameter in the affecte...