CVE-2006-4587 | BDVDB-2026-19019 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) description parameter in unspecified modules or the (2) solution parameter in the HelpDesk module.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/21728
http://www.security-net.biz/adv/D3906a.txt
http://www.vupen.com/english/advisories/2006/3444
http://www.osvdb.org/28460
http://www.securityfocus.com/bid/19829
http://www.osvdb.org/28461

Exploit#

No public exploit known

History#

Version 12006-09-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.