CVE-2005-3819: Vtiger CRM

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the (1) user_name and (2) date parameter in the HelpDesk module.

Affected products

• Vtiger Vtiger CRM: up to and including 4.2

Published 2005-11-26. Last modified 2026-06-16.