CVE-2013-5091 | BDVDB-2026-57807 Detail

Description#

SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated users to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php. NOTE: this issue might be a duplicate of CVE-2011-4559.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2013-09/0079.html
http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.4.0/Core%20Product/
https://www.htbridge.com/advisory/HTB23168
http://osvdb.org/76138
http://www.exploit-db.com/exploits/28409

Exploit#

http://www.exploit-db.com/exploits/28409

History#

Version 12013-10-04Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.