Skip to content

Vtiger Crm vulnerabilities

vtiger crmMultiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to...CVE-2008-3101Public exploit4.3 MediumSeptember 3, 2008
vtiger crmVtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access...CVE-2008-34585.0 MediumAugust 4, 2008
vtiger crmThe report module in vtiger CRM before 5.0.3 does not properly apply security rules, which allows...CVE-2007-36174.0 MediumJuly 6, 2007
vtiger crmindex.php in vtiger CRM before 5.0.3 allows remote authenticated users to perform administrative...CVE-2007-36166.5 MediumJuly 6, 2007
vtiger crmvtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard...CVE-2007-36044.0 MediumJuly 6, 2007
vtiger crmSQL injection vulnerability in the dashboard (include/utils/SearchUtils.php) in vtiger CRM before...CVE-2007-36036.5 MediumJuly 6, 2007
vtiger crmThe SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are...CVE-2007-36025.5 MediumJuly 6, 2007
vtiger crmvtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read...CVE-2007-36012.1 LowJuly 6, 2007
vtiger crmWordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote...CVE-2007-36004.0 MediumJuly 6, 2007
vtiger crmvtiger CRM before 5.0.3 allows remote authenticated users to import and export the information...CVE-2007-35998.5 HighJuly 6, 2007
vtiger crmindex.php in vtiger CRM before 5.0.3 allows remote authenticated users to obtain all users' names...CVE-2007-35985.5 MediumJuly 6, 2007
vtiger crmMultiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote...CVE-2006-5289Public exploit7.5 HighOctober 13, 2006
vtiger crmUnrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly...CVE-2006-46177.5 HighSeptember 7, 2006
vtiger crmvtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and...CVE-2006-45887.5 HighSeptember 6, 2006
vtiger crmMultiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier,...CVE-2006-45876.8 MediumSeptember 6, 2006
vtiger crmThe uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary...CVE-2005-38245.0 MediumNovember 26, 2005
vtiger crmThe Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP...CVE-2005-38237.5 HighNovember 26, 2005
vtiger crmMultiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to...CVE-2005-38227.5 HighNovember 26, 2005
vtiger crmCross-site scripting (XSS) vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to...CVE-2005-38214.3 MediumNovember 26, 2005
vtiger crmMultiple directory traversal vulnerabilities in index.php in vTiger CRM 4.2 and earlier allow...CVE-2005-38206.4 MediumNovember 26, 2005
vtiger crmMultiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to...CVE-2005-3819Public exploit7.5 HighNovember 26, 2005
vtiger crmMultiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote...CVE-2005-3818Public exploit4.3 MediumNovember 26, 2005