2019-05-24 17:40:48
mitre
PUBLISHED
modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter.