PT-2020-7430

Name of the Vulnerable Software and Affected Versions: vtiger CRM versions 5.4.0 and earlier Description: The issue is related to a PHP Code Injection Vulnerability in the 'vtigerolservice.php' file. This vulnerability allows for the injection of PHP code, potentially leading to unauthorized acce...

CVE-2013-3214: Improper Neutralization of Special Elements in Output Used by a Downstream Component

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'...

PT-2014-2662

Name of the Vulnerable Software and Affected Versions vTiger CRM versions 5.0.0 through 5.4.0 Description The issue allows remote attackers to execute arbitrary SQL commands via several parameters, including the picklist name parameter in the "get picklists" method to "soap/customerportal.php", t...

CVE-2013-3213: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the 1 picklistname parameter in the getpicklists method to soap/customerportal.php, 2 where parameter in the getticketslist method to soap/customerportal.php, or 3...