Vtiger Vtiger Crm : Security vulnerabilities, CVEs sql injection published in May 2019

SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands.

Max CVSS

8.8

EPSS Score

0.23%

Published

2019-05-17

Updated

2020-11-10

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.

Max CVSS

8.8

EPSS Score

0.10%

Published

2019-05-24

Updated

2019-05-29

2 vulnerabilities found

Vtiger » Vtiger Crm : Security Vulnerabilities, CVEs, Published In May 2019 (Sql injection)