CVE-2010-3911 in CRM

Resumen (Inglés)

Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username (aka default_user_name) field or (2) the password field in a Users Login action to index.php, or (3) the label parameter in a Settings GetFieldInfo action to index.php, related to modules/Settings/GetFieldInfo.php.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2010-10-12

Divulgación

2010-11-26

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
55552	vtiger CRM index.php secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2010-3911

Fuentes

• MITRE
• NVD
• CVE Details