CVE-2005-3822: Vtiger CRM

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username in the login form or (2) record parameter, as demonstrated in the EditView action for the Contacts module.

Affected products

• Vtiger Vtiger CRM: up to and including 4.2

Published 2005-11-26. Last modified 2026-06-16.