Xrms Crm Project Xrms Crm
2 CVEs affecting Xrms Crm Project Xrms Crm. Latest disclosed: 2014-10-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-5520 | | 2014-10-26 | SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the user_id parameter to plugins/webfor… | |
CVE-2014-5521 | | 2014-09-02 | plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the user… |