critical9.0
CVE-2009-3258
vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5…
Impact
vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5) tickets; insert (6) attachments, (7) reports, (8) filters, (9) views, and (10) tickets; and edit (11) reports, (12) filters, (13) views, and (14) tickets via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vtiger | Vtiger Crm | Versions 1.0, 2.0, 2.0.1, 2.1, 3, 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://forums.vtiger.com/viewtopic.php?t=15094
- http://forums.vtiger.com/viewtopic.php?t=16756
- http://secunia.com/advisories/36309
- http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249
- http://forums.vtiger.com/viewtopic.php?t=15094
- http://forums.vtiger.com/viewtopic.php?t=16756
- http://secunia.com/advisories/36309
- http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5249