Lucene search
HistoryNov 26, 2005 - 2:03 a.m.
CVE-2005-3824
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action.
Affected configurations
Node
vtigervtiger_crmRange≤4.2
Related
cvelist
cvelist
CVE-2005-3824
2005-11-26 02:00:00
cve
cve
CVE-2005-3824
2005-11-26 02:03:00
openvas
openvas
vTiger < 4.5 Alpha 2 Multiple Vulnerabilities
2006-03-26 00:00:00
nessus
nessus
vTiger < 4.5a2 Multiple Vulnerabilities
2005-12-16 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.9 Medium
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Related for NVD:CVE-2005-3824