critical9.0Public exploit code
CVE-2009-3250
The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by compo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- vTiger CRM 5.0.4 - Remote Code Execution / Cross-Site Request Forgery / Local File Inclusion / Cross-Site Scripting2009-08-18 · webapps · php · Verified
Impact
The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vtiger | Vtiger Crm | Version 5.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=125060676515670&w=2
- http://secunia.com/advisories/36309
- http://www.exploit-db.com/exploits/9450
- http://www.osvdb.org/57237
- http://www.securityfocus.com/bid/36062
- http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/
- http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt
- http://www.vupen.com/english/advisories/2009/2319
- http://marc.info/?l=bugtraq&m=125060676515670&w=2
- http://secunia.com/advisories/36309
- http://www.exploit-db.com/exploits/9450
- http://www.osvdb.org/57237
- http://www.securityfocus.com/bid/36062
- http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/
- http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt
- http://www.vupen.com/english/advisories/2009/2319