TI-2010-04731 CVE-2010-5008 · GHSA-c2w3-7wqf-v7mcSQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware…Priority LOW 35SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01023 · Published 2011-11-02 · No fix listed CWE-89