Vulnerability in Vtiger Crm

CVE-2007-3603

SQL injection vulnerability in the dashboard (include/utils/SearchUtils.php) in vtiger CRM before 5.0.3 allows remote authenticated users to execute arbitrary SQL commands via the assigned_user_id parameter in a Potentials ListView action to index.php.

EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.

Affected products

Vtiger Vtiger_crm
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (Patch, x_refsource_MISC)