CVE-2019-11057 - SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands

HIGH

SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands

Published May 17, 2019

8.8

HIGH

CVSS 3.1

EPSS 1.18%

SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-April/037964.html		mailing-listx_refsource_MLISTVendor Advisory
https://cybersecurityworks.com/zerodays/cve-2019-11057-vtiger.html		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2765		Advisory
https://medium.com/%40mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c		x_refsource_MISC