| Package | Affected versions | Patched versions |
|---|---|---|
| browsercrm | = 4.604.01= 4.605.00= 4.607.00= 4.610.00= 4.611.01= 4.612.00= 4.614.00= 4.615.10= 4.615.11= 4.616.00= 4.617.00= 4.619.00= 4.620.01= 4.622.00= 4.624.00= 4.624.01= 4.624.50= 4.624.60= 4.624.70= 4.624.80= 4.624.90= 4.691.01= 4.999.20= 5.000.00= 5.000.01= 5.001.00= 5.002.00= 5.100.00≤ 5.100.01 |
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free