CVE-2019-11057

Description

References

• lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-April/037964.html · Vendor Advisory
• cybersecurityworks.com/zerodays/cve-2019-11057-vtiger.html · Exploit
• medium.com/%40mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c

Weitere Schwachstellen in vtiger crm

• CVE-2025-45753HOCH 7.2A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploitin…
• CVE-2025-45755MITTEL 6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import featu…
• CVE-2025-1618MITTEL 6.1A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unknown code of the file …
• CVE-2024-54687MITTEL 6.1Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntity…
• CVE-2024-48119MITTEL 5.4Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML.