[Vtigercrm-developers] OWASP Top 10

[Hamono, Chris (DPC)]

I am sorry to be negative Joe, but I doubt any one has. 

Personally I would only use vtiger behind a firewall. Much of the code is very old very complicated and possibly vulnerable.

That's not to say great strides haven't been taken to improve the code. There has been. The fact you have to turn off warnings shows there is a lot of unprotected legacy code.

Chris


-----Original Message-----
From: vtigercrm-developers-bounces at lists.vtigercrm.com [mailto:vtigercrm-developers-bounces at lists.vtigercrm.com] On Behalf Of Joe Bordes
Sent: Tuesday, 13 January 2015 9:41 PM
To: vtigercrm-developers at lists.vtigercrm.com
Subject: [Vtigercrm-developers] OWASP Top 10

Hi,

I have a client who is trying to pass the ISO certification and he needs an OWASP Top 10 analysis of vtiger CRM. Has anybody done this before?

Thanks

--
Un saludo
Joe
TSolucio

_______________________________________________
http://www.vtiger.com/