CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter....
Read Advisory
Never Miss a Critical Alert
CVE advisories, breach reports, and threat intel — delivered daily to your inbox.
Search across all sites
ESC
We use privacy-focused analytics (PostHog, hosted in the EU) to understand how the site is used. Nothing is loaded until you accept. No ads, no tracking across other sites. You can accept, reject, or read our Privacy Policy.