Lucene search
HistoryNov 26, 2005 - 2:03 a.m.
CVE-2005-3823
vtiger crm
users module
remote code execution
arbitrary file
templatename parameter
eval function
cve-2005-3823
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.6%
The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function.
Affected configurations
Node
vtigervtiger_crmRange≤4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| vtiger:vtiger_crm | vtiger vtiger crm | le | 4.2 |
Related
cvelist
cvelist
CVE-2005-3823
2005-11-26 02:00:00
nvd
nvd
CVE-2005-3823
2005-11-26 02:03:00
nessus
nessus
vTiger < 4.5a2 Multiple Vulnerabilities
2005-12-16 00:00:00
openvas
openvas
vTiger < 4.5 Alpha 2 Multiple Vulnerabilities
2006-03-26 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.019 Low
EPSS
Percentile
88.6%
Related for CVE-2005-3823