Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-5213

Опубликовано: 25 окт. 2012
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:browsercrm:browsercrm:*:*:*:*:*:*:*:*
Версия до 5.100.01 (включая)
cpe:2.3:a:browsercrm:browsercrm:4.604.01:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.605.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.607.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.610.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.611.01:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.612.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.614.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.615.10:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.615.11:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.616.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.617.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.619.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.620.01:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.622.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.624.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.624.01:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.624.50:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.624.60:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.624.70:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.624.80:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.624.90:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.691.01:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:4.999.20:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:5.000.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:5.000.01:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:5.001.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:5.002.00:*:*:*:*:*:*:*
cpe:2.3:a:browsercrm:browsercrm:5.100.00:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02303
Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

github
больше 3 лет назад

Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php.

EPSS

Процентиль: 84%
0.02303
Низкий

7.5 High

CVSS2

Дефекты

CWE-89