VulnerabilityModified
CVE-2005-3824
The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action.
MEDIUM 5.0EPSS 1.49%
Does this matter?
Lower severity and a low EPSS score (1.49%). Track it; it rarely justifies an emergency change on its own.
Description
The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.49% probability · 73th percentile
- CISA KEV
- Not listed
- Affected
- vtiger/vtiger crm
- Source
- cve@mitre.org
References
- http://marc.info/?l=full-disclosure&m=113290708121951&w=2
- http://secunia.com/advisories/17693Vendor Advisory
- http://securitytracker.com/id?1015274
- http://www.securityfocus.com/archive/1/417711/30/0/threaded
- http://www.securityfocus.com/bid/15569
- http://www.vupen.com/english/advisories/2005/2569
- http://marc.info/?l=full-disclosure&m=113290708121951&w=2
- http://secunia.com/advisories/17693Vendor Advisory
- http://securitytracker.com/id?1015274
- http://www.securityfocus.com/archive/1/417711/30/0/threaded
- http://www.securityfocus.com/bid/15569
- http://www.vupen.com/english/advisories/2005/2569
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.