CVE-2005-3822
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to...
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.
- Record
CVE-2005-3822- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.
- Record
CVE-2005-3822- Updated
- 2026-11-02
EUVDEUVD-2005-3817No score
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.
- Record
EUVD-2005-3817- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mxfw-86mc-qf94No score
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to...
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.
- Record
GHSA-mxfw-86mc-qf94- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3822 is a high vulnerability (CVSS 7.5) in Vtiger Crm, published November 26, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.41%, the 73rd percentile. No source names a fixed version.
References
securityfocus.com/archive/1/417711/30/0/threaded
vupen.com/english/advisories/2005/2569
securityreason.com/securityalert/203
securitytracker.com/id?1015274
marc.info?l=full-disclosure&m=113290708121951&w=2
secunia.com/advisories/17693
nvd.nist.gov/vuln/detail/CVE-2005-3822
github.com/advisories/GHSA-mxfw-86mc-qf94