Description
VTiger CRM <= 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection in the "CompanyDetails" operation of the "MailManager" module.
High · 7.2
CVE-2024-42994
EUVD-2024-39868GHSA-vf2f-4qh9-fpch
VTiger CRM <= 8.1.0 does not properly sanitize user input before using it in a SQL statement, leading to a SQL Injection in the "CompanyDet…
Published Aug 16, 2024 · Updated Aug 16, 2024 · Assigned by mitre