CVE-2013-3591

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• vTiger CRM 5.3.0 5.4.0 - (Authenticated) Remote Code Execution (Metasploit)2013-10-31 · remote · php · Verified

Impact

vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.exploit-db.com/exploits/29319
• http://www.securityfocus.com/bid/63454
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
• http://www.exploit-db.com/exploits/29319
• http://www.securityfocus.com/bid/63454
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
• https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats