662 matches found
vTiger CRM 5.2 - onlyforuser SQL Injection
vTiger CRM 5.2 - onlyforuser SQL Injection source: https://www.securityfocus.com/bid/49948/info vtiger CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
vTiger CRM 5.2 - 'onlyforuser' SQL Injection
source: https://www.securityfocus.com/bid/49948/info vtiger CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Vtiger CRM <= 5.2.1 RCE Vulnerability
Vtiger CRM is prone to a remote code execution RCE vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Vtiger CRM <= 5.2.1 SQLi Vulnerability
Vtiger CRM is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
vTiger CRM 5.2.x <= Remote Code Execution Vulnerability
vTiger CRM 5.2.x = Remote Code Execution Vulnerability 1. OVERVIEW The vTiger CRM 5.2.1 and lower versions are vulnerable to Remote Code Execution. No fixed version has been released as of 2011-10-05. 2. BACKGROUND vtiger CRM is a free, full-featured, 100 Open Source CRM software ideal for small...
vTiger CRM 5.2.1 Blind SQL Injection
vTiger CRM 5.2.x = Blind SQL Injection Vulnerability 1. OVERVIEW The vTiger CRM 5.2.1 and lower versions are vulnerable to Blind SQL Injection. No fixed version has been released as of 2011-10-05. 2. BACKGROUND vtiger CRM is a free, full-featured, 100% Open Source CRM software ideal for small and...
vTiger CRM 5.2.x <= Multiple Cross Site Scripting Vulnerabilities
vTiger CRM 5.2.x = Multiple Cross Site Scripting Vulnerabilities 1. OVERVIEW The vTiger CRM 5.2.1 and lower versions are vulnerable to Cross Site Scripting. No fixed version has been released as of 2011-10-04. 2. BACKGROUND vtiger CRM is a free, full-featured, 100 Open Source CRM software ideal f...
vTiger CRM 5.2.1 Cross Site Scripting
vTiger CRM 5.2.x alert/XSS/ Parameter: workflowid /index.php?module=comvtigerworkflow&ac...
vTiger CRM 5.2.1 - 'PHPrint.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/49927/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
vTiger CRM 5.2.1 - index.php Multiple Cross-Site Scripting Vulnerabilities (1)
vTiger CRM 5.2.1 - index.php Multiple Cross-Site Scripting Vulnerabilities 1 source: https://www.securityfocus.com/bid/49927/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...
vTiger CRM 5.2.1 - PHPrint.php Multiple Cross-Site Scripting Vulnerabilities
vTiger CRM 5.2.1 - PHPrint.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49927/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...
vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (1)
source: https://www.securityfocus.com/bid/49927/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
vtiger CRM 'sortfieldsjson.php' Local File Include Vulnerability
vtiger CRM is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow t...
Vtiger CRM <= 5.2.1 LFI Vulnerability - Active Check
Vtiger CRM is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Vtiger CRM <= 5.2.1 XSS Vulnerability - Active Check
Vtiger CRM is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
vTiger CRM 5.2.1 - sortfieldsjson.php Local File Inclusion
vTiger CRM 5.2.1 - sortfieldsjson.php Local File Inclusion source: https://www.securityfocus.com/bid/47263/info vtiger CRM is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...
vTiger CRM 5.2.1 - 'sortfieldsjson.php' Local File Inclusion
source: https://www.securityfocus.com/bid/47263/info vtiger CRM is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in t...
vTiger CRM 5.2.1 - vtigerservice.php Cross-Site Scripting
vTiger CRM 5.2.1 - vtigerservice.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47267/info vtiger CRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...
vtiger CRM 5.2.1 Local File Inclusion
------------------------------------------------------------------------ Software................vtiger CRM 5.2.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vtiger.com/ Discovery Date..........4/5/2011 Tested...
vTiger CRM 5.2.1 - 'vtigerservice.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47267/info vtiger CRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...