Published: 02/01/2014 Updated: 03/01/2014

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in app/controllers/home_controller.rb in Fat Free CRM prior to 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the homepage timeline feature or (2) the activity feature.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fatfreecrm fat free crm 0.11.0
fatfreecrm fat free crm 0.9.10
fatfreecrm fat free crm
fatfreecrm fat free crm 0.11.2
fatfreecrm fat free crm 0.11.1
fatfreecrm fat free crm 0.9.8
fatfreecrm fat free crm 0.9.7
fatfreecrm fat free crm 0.9.6
fatfreecrm fat free crm 0.10.1
fatfreecrm fat free crm 0.9.9

CWE-89 https://github.com/fatfreecrm/fat_free_crm/issues/300 https://github.com/fatfreecrm/fat_free_crm/commit/d4b2de81a4d8c1b201482edcb2488ed9280a65fd https://github.com/fatfreecrm/fat_free_crm/commit/078035f1ef73ed85285ac9d128c3c5f670cef066 http://seclists.org/fulldisclosure/2013/Dec/199 http://openwall.com/lists/oss-security/2013/12/28/2 https://github.com/fatfreecrm/fat_free_crm/wiki/Fixing-security-vulnerabilities-%2827th-Dec-2013%29 http://www.phenoelit.org/stuff/ffcrm.txt https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-7225

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect