CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-7225

Multiple SQL injection vulnerabilities in app/controllers/home_controller.rb in Fat Free CRM before 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the homepage timeline feature or (2) the activity feature.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 77.6%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2013-7225

Fatfreecrm » Fat Free Crm » Version: 0.10.1

cpe:2.3:a:fatfreecrm:fat_free_crm:0.10.1
Fatfreecrm » Fat Free Crm » Version: 0.11.0

cpe:2.3:a:fatfreecrm:fat_free_crm:0.11.0
Fatfreecrm » Fat Free Crm » Version: 0.11.1

cpe:2.3:a:fatfreecrm:fat_free_crm:0.11.1
Fatfreecrm » Fat Free Crm » Version: 0.11.2

cpe:2.3:a:fatfreecrm:fat_free_crm:0.11.2
Fatfreecrm » Fat Free Crm » Version: 0.11.3

cpe:2.3:a:fatfreecrm:fat_free_crm:0.11.3
Fatfreecrm » Fat Free Crm » Version: 0.11.4

cpe:2.3:a:fatfreecrm:fat_free_crm:0.11.4
Fatfreecrm » Fat Free Crm » Version: 0.12.0

cpe:2.3:a:fatfreecrm:fat_free_crm:0.12.0
Fatfreecrm » Fat Free Crm » Version: 0.9.0

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.0
Fatfreecrm » Fat Free Crm » Version: 0.9.1

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.1
Fatfreecrm » Fat Free Crm » Version: 0.9.10

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.10
Fatfreecrm » Fat Free Crm » Version: 0.9.2

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.2
Fatfreecrm » Fat Free Crm » Version: 0.9.3

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.3
Fatfreecrm » Fat Free Crm » Version: 0.9.4

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.4
Fatfreecrm » Fat Free Crm » Version: 0.9.5

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.5
Fatfreecrm » Fat Free Crm » Version: 0.9.6

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.6
Fatfreecrm » Fat Free Crm » Version: 0.9.7

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.7
Fatfreecrm » Fat Free Crm » Version: 0.9.8

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.8
Fatfreecrm » Fat Free Crm » Version: 0.9.9

cpe:2.3:a:fatfreecrm:fat_free_crm:0.9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-7225

Products

Pricing

Contact Us