| Package | Affected versions | Patched versions |
|---|---|---|
| vtiger crm | ≤ 4.2 |
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free