CVE-2016-10754

Description

References

• blog.ripstech.com/2016/vtiger-sql-injection · Exploit
• demo.ripstech.com/projects/vtiger_6.5.0 · Third Party Advisory

Mais vulnerabilidades de vtiger crm

• CVE-2025-45753ALTO 7.2A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploitin…
• CVE-2025-45755MÉDIO 6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import featu…
• CVE-2025-1618MÉDIO 6.1A vulnerability has been found in vTiger CRM 6.4.0/6.5.0 and classified as problematic. This vulnerability affects unknown code of the file …
• CVE-2024-54687MÉDIO 6.1Vtiger CRM v.6.1 and before is vulnerable to Cross Site Scripting (XSS) via the Documents module and function uploadAndSaveFile in CRMEntity…
• CVE-2024-48119MÉDIO 5.4Vtiger CRM v8.2.0 has a HTML Injection vulnerability in the module parameter. Authenticated users can inject arbitrary HTML.