high8.8Public exploit code
CVE-2020-28328
SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SuiteCRM 7.11.15 - 'last_name' Remote Code Execution (Authenticated)2020-11-09 · webapps · php
Impact
SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled .php file under the web root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Salesagility | Suitecrm | before 7.11.17 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159937/SuiteCRM-7.11.15-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162975/SuiteCRM-Log-File-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165001/SuiteCRM-7.11.18-Remote-Code-Execution.html
- https://github.com/mcorybillington/SuiteCRM-RCE
- https://suitecrm.com/suitecrm-7-11-17-7-10-28-lts-versions-released/
- http://packetstormsecurity.com/files/159937/SuiteCRM-7.11.15-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/162975/SuiteCRM-Log-File-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/165001/SuiteCRM-7.11.18-Remote-Code-Execution.html
- https://github.com/mcorybillington/SuiteCRM-RCE
- https://suitecrm.com/suitecrm-7-11-17-7-10-28-lts-versions-released/