CVE-2011-4559

N/A Unknown

Published: November 28, 2011 Modified: April 29, 2026

Description

SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://osvdb.org/76138

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2011/Oct/224

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/520006/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/49948

Source: cve@mitre.org

Exploit

http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_blind_sqlin

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/70344

Source: cve@mitre.org

http://osvdb.org/76138