CVE

Id
52471  
CVE No.
CVE-2011-4559  
Status
Candidate  
Description
SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php.  
Phase
Assigned (20111128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
558863 52471 CVE-2011-4559 BUGTRAQ:20111005 vTiger CRM 5.2.x <= Blind SQL Injection Vulnerability  View
558864 52471 CVE-2011-4559 URL:http://www.securityfocus.com/archive/1/archive/1/520006/100/0/threaded  View
558865 52471 CVE-2011-4559 FULLDISC:20111005 vTiger CRM 5.2.x <= Blind SQL Injection Vulnerability  View
558866 52471 CVE-2011-4559 URL:http://seclists.org/fulldisclosure/2011/Oct/224  View
558867 52471 CVE-2011-4559 MISC:http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_blind_sqlin  View
558868 52471 CVE-2011-4559 BID:49948  View
558869 52471 CVE-2011-4559 URL:http://www.securityfocus.com/bid/49948  View
558870 52471 CVE-2011-4559 OSVDB:76138  View
558871 52471 CVE-2011-4559 URL:http://osvdb.org/76138  View
558872 52471 CVE-2011-4559 XF:vtigercrm-index-sql-injection(70344)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32869 JVNDB-2011-003109 Active CMS の admin script におけるクロスサイトスクリプティングの脆弱性 Active CMS の admin script には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-4564 52471 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003109.html  View