CVE-2010-3911 in CRM
Summary
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username (aka default_user_name) field or (2) the password field in a Users Login action to index.php, or (3) the label parameter in a Settings GetFieldInfo action to index.php, related to modules/Settings/GetFieldInfo.php.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
10/12/2010
Disclosure
11/26/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 55552 | vtiger CRM index.php cross site scripting | 79 | Not defined | Official fix | CVE-2010-3911 |