CVE-2011-5213
BrowserCRM < 5.100.01 - SQL Injection via login[username] or parent_id or contact_id Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-5213. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in Browser CRM 5.100.01, including an example SQLi payload. However, it lacks executable exploit code, making it a vulnerability writeup rather than a functional PoC.
Description
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login[username] parameter to index.php, (2) parent_id parameter to modules/Documents/version_list.php, or (3) contact_id parameter to modules/Documents/index.php.
Exploits (2)
The provided text describes SQL injection and XSS vulnerabilities in Browser CRM 5.100.01, including an example SQLi payload. However, it lacks executable exploit code, making it a vulnerability writeup rather than a functional PoC.
The provided text describes SQL injection and XSS vulnerabilities in Browser CRM 5.100.01 due to insufficient input sanitization. It includes a sample SQLi payload but lacks executable exploit code.