CVE-2011-5213 | BDVDB-2026-53190 Detail

Description#

Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/77734
http://osvdb.org/77733
https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_browser_crm.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/71828
http://osvdb.org/77735
http://secunia.com/advisories/47217

Exploit#

No public exploit known

History#

Version 12012-10-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.