Vtiger CRM File Upload PHP Code Execution Vulnerability

Vtiger CRM is a customer relationship management software that helps businesses become organized, increase sales, improve marketing ROI and provide an enjoyable customer service experience. A file upload PHP code execution vulnerability exists in Vtiger CRM version 7.1.0 prior to Hotfix2. The...

PT-2019-17399

Name of the Vulnerable Software and Affected Versions Vtiger CRM version 7.1.0 before Hotfix2 Description The issue allows uploading files with the php3 extension in the logo upload field, under specific conditions, such as the file being in PNG format and having a size of 150x40. An attacker can...