Lucene search
HistoryNov 26, 2005 - 2:03 a.m.
CVE-2005-3824
vtiger crm
uploads module
remote attackers
arbitrary files
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action.
Affected configurations
Node
vtigervtiger_crmRange≤4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| vtiger:vtiger_crm | vtiger vtiger crm | le | 4.2 |
Related
nvd
nvd
CVE-2005-3824
2005-11-26 02:03:00
cvelist
cvelist
CVE-2005-3824
2005-11-26 02:00:00
openvas
openvas
vTiger < 4.5 Alpha 2 Multiple Vulnerabilities
2006-03-26 00:00:00
nessus
nessus
vTiger < 4.5a2 Multiple Vulnerabilities
2005-12-16 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2005-3824