2 matches found
CVE-2015-6000: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in the SettingsVtigerCompanyDetailsSaveAction class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then...
8.8CVSS8AI score0.40241EPSS
SaveExploits11References2
CVE-2016-1713: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in the SettingsVtigerCompanyDetailsSaveAction class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows remote authenticated users to execute arbitrary code by uploading a crafted image file with an executable extension, then...
8.5CVSS6.5AI score0.16561EPSS
SaveExploits9References2
20