CVE-2011-5213: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 loginusername parameter to index.php, 2 parentid parameter to modules/Documents/versionlist.php, or 3 contactid parameter to modules/Documents/index.php...

PT-2012-2190

Name of the Vulnerable Software and Affected Versions BrowserCRM versions 5.100.01 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the loginusername parameter to "index.php", the parent id parameter to "modules/Documents/versio...