Summary
vtiger CRM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
vtiger CRM 5.2.1 is vulnerable
prior versions may also be affected.
References
Severity
Classification
-
CVE CVE-2011-4559 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Adobe ColdFusion Information Disclosure Vulnerability
- Alchemy Eye HTTP Command Execution
- Acute Control Panel SQL Injection Vulnerability and Remote File Include Vulnerability
- 3Com OfficeConnect VPN Firewall Default Password Security Bypass Vulnerability
- Apache Tomcat Windows Installer Privilege Escalation Vulnerability