الباحثون
رجوع
Paolo Cavagliã
باحث من
Shielder
#20084
من 60,450
15.5
إجمالي CVSS
الثغرات
·
2
عالية
2
PT-2024-30247
2024-08-16
7.2
CVE-2024-42994
Vtiger
Vtiger Crm
The issue arises from improper sanitization of user input before it is used in a SQL statement, leading to a SQL Injection in the `CompanyDetails` operation of the `MailManager` module.
PT-2024-30248
2024-08-16
8.3
CVE-2024-42995
Vtiger
Vtiger Crm
The issue concerns incorrect user privilege checking, allowing a low-privileged user to interact directly with the "Migration" administrative module. This enables the user to disable arbitrary modules.