SQL Injection

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) picklist_name parameter in the get_pi…CVE-2013-3213Vtiger · 3.1% likely

   CWE-89

2. modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.CVE-2016-10754Vtiger · 1.4% likely

   CWE-89

3. SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php.CVE-2023-38891Vtiger · 1.3% likely

   CWE-89

4. SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the onlyforuser parameter in an in…CVE-2011-4559Vtiger · 1.3% likely

   CWE-89

5. An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature.CVE-2020-22807Vtiger · 1.3% likely

   CWE-89

6. SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands.CVE-2019-11057Vtiger · 1.2% likely

   CWE-89

7. SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated users to execute arbitrary SQL commands via the onlyforuser…CVE-2013-5091Vtiger · 1.2% likely

   CWE-89

8. VTiger CRM <= 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection in the "CompanyDetails" operation of the "MailManager" mod…CVE-2024-42994Vtiger · CVSS 7.2 · 0.5% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.