Description
The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action.
References
- 20051125 SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM mailing-list
- 15569 vdb-entry
- ADV-2005-2569 vdb-entry
- 1015274 vdb-entry
- 20051125 SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM mailing-list
- 17693 third-party-advisory