CVE-2013-3214

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• vTiger CRM 5.4.0 SOAP - AddEmailAttachment Arbitrary File Upload (Metasploit)2014-01-07 · remote · php · Verified
• vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities2013-08-02 · webapps · php

Impact

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.exploit-db.com/exploits/30787
• http://www.securityfocus.com/bid/61558
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86164
• http://www.exploit-db.com/exploits/30787
• http://www.securityfocus.com/bid/61558
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86164