📦 Vtiger Crm
by Vtiger
🔍 What is Vtiger Crm?
Description coming soon...
🛡️ Security Overview
Click on a severity to filter vulnerabilities
⚠️ Known Vulnerabilities
A reflected cross-site scripting vulnerability in vTiger CRM 7.4.0 allows attackers to inject malicious scripts via the tag parameter. When exploited, this enables arbitrary code execution in users' b...
This reflected cross-site scripting (XSS) vulnerability in vTiger CRM 7.4.0 allows attackers to inject malicious scripts via the viewname parameter. When exploited, it enables arbitrary code execution...
CVE-2020-22807 is a critical SQL injection vulnerability in vtiger CRM's calendar export feature that allows attackers to execute arbitrary SQL commands. This affects vtiger CRM 7.2 installations, pot...
This vulnerability allows low-privileged users in VTiger CRM to bypass authorization checks and disable arbitrary modules via the Migration administrative module. It affects all VTiger CRM installatio...
CVE-2023-46304 is a remote code execution vulnerability in Vtiger CRM 7.5.0 where authenticated attackers can write arbitrary PHP code to config.inc.php, which executes on every page load. This allows...
This SQL injection vulnerability in Vtiger CRM v7.5.0 allows authenticated remote attackers to execute arbitrary SQL commands via the getQueryColumnsList function in ReportRun.php. This can lead to pr...
A stored cross-site scripting vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows attackers to inject malicious scripts via CSV file uploads in the Services Import feature. The vulnerability...
This vulnerability in vTiger CRM allows attackers to inject malicious scripts via the _operation parameter in the Mobile module, leading to cross-site scripting (XSS). It affects vTiger CRM versions 6...
Vtiger CRM v8.2.0 contains an HTML injection vulnerability in the module parameter that allows authenticated users to inject arbitrary HTML content. This could lead to phishing attacks, session hijack...
An open redirect vulnerability in vTiger CRM v7.4.0 allows attackers to craft malicious URLs that redirect users to untrusted external sites. This affects all users of vTiger CRM v7.4.0 who click on m...