Launchpad.net

Launchpad CVE tracker

CVE 2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.

See the

CVE page on Mitre.org for more details.

References

MISC: https://blog.ripstech....
MISC: https://demo.ripstech....