high8.8
CVE-2019-11057
SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands.
Impact
SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vtiger | Vtiger Crm | through 7.0.1 Version 7.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-April/037964.html
- https://cybersecurityworks.com/zerodays/cve-2019-11057-vtiger.html
- https://medium.com/%40mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c
- http://lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-April/037964.html
- https://cybersecurityworks.com/zerodays/cve-2019-11057-vtiger.html
- https://medium.com/%40mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c