CVE-2023-46304

CVE-2023-46304 VTiger 开源 CRM v7.5 中的认证远程代码执行漏洞 摘要 当前发行的 VTiger CRM 开源版本 7.5.0 的 Users 模块中存在一个漏洞，允许经过认证的攻击者向 config.inc.php 写入并执行任意 PHP 代码。 漏洞详情 当用户正常认证到 VTiger 时，系统会检查其设置状态，以判断是否为尚未完全配置的新用户。同时也会检查是否为第一个用户（即应配置某些全局属性的管理员）。如果是，则会被重定向到 Users 模块中的 UserSetup 操作。 root@kitploit: $userSetupStatus =...

CVE-2023-38891

CVE-2023-38891 VTiger开源CRM v7.5中的已验证SQL注入漏洞 发现者: Jacob Elliott 2023年7月13日 摘要 在VTiger CRM v7.5.0的报表模块中，对报表所选字段的检查不足，这些字段被存储，随后在运行报表时作为二阶SQL注入被重新引入。这允许攻击者从数据库中泄露任意字段，包括用户密码哈希、Web服务API访问密钥以及其他敏感数据。 概念验证 通过CRM验证后，用户可以浏览到报表模块并创建新报表。 由于表的连接方式，最好选择一个包含记录的表单作为主模块。我选择了包含一条记录的"联系人"。...

Vtiger CRM v7.2.0 - Directory Listing

Vtiger CRM v7.2.0 contains a directory traversal vulnerability caused by improper access controls in /libraries and /layout directories, letting attackers display hidden files and list directories, exploit requires no authentication. id: CVE-2020-19363 info: name: Vtiger CRM v7.2.0 - Directory...

VTIGER-CRM-RCE-CVE-2026-23698

Este repositorio no tiene un README...

VTIGER-CRM-RCE-CVE-2026-23697

此存储库没有 README。...

CVE-2013-3214

CVE-2013-3214 vTiger 5.4.0 Subida Arbitraria de Archivos a Ejecución Remota de Código...

The vulnerability of the import function for modules of the vTiger CRM system’s client relationship management module allows a hacker to gain unauthorized access to protected information, upload arbitrary files, and execute arbitrary code.

The vulnerability of the module for importing customer relationship management files in vTiger CRM involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information, load arbitrary files...

The vulnerability of the Documents module in the vTiger CRM system’s customer relationship management software allows a hacker to gain unauthorized access to protected information, upload arbitrary files, and execute arbitrary code.

The vulnerability of the Documents module in the vTiger CRM system’s customer relationship management software is related to the unlimited loading of dangerous types of files. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information,...

📄 Vtiger CRM 8.3.0 / 8.4.0 Shell Upload

This repository contains a Python proof of concept for CVE-2026-23698, an authenticated remote code execution vulnerability affecting Vtiger CRM. The PoC implements two exploitation techniques: abusing the Module Manager to import a malicious module containing a PHP webshell, and on certain...

📄 Vtiger CRM 8.3.0 Shell Upload

This is a focused authenticated remote code execution proof of concept exploit for Vtiger CRM version 8.3.0. It logs into Vtiger, uploads a .phar PHP webshell through the Documents module, uses /storage/ directory listing to discover the randomized uploaded filename, then executes commands throug...

CVE-2026-23698

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

CVE-2026-23697

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

CVE-2026-23697

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

CVE-2026-23697 Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

CVE-2026-23697

Vtiger CRM before 8.4.0 is vulnerable to an authenticated file upload RCE via the Documents module. An attacker with low privileges can upload a .phar file containing arbitrary PHP code, bypassing the extension denylist in config.inc.php (which omits .phar). The uploaded file is stored with its o...

CVE-2026-23697 Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module

Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the...

EUVD-2026-42054

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

CVE-2026-23698 Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

CVE-2026-23698 Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload

Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...

CVE-2026-23698

Vtiger CRM up to 8.4.0 is affected by an authenticated remote code execution vulnerability in the admin ModuleManager import feature. A privileged administrator can upload a crafted ZIP archive which is extracted directly into the web root’s modules/ directory without proper file-type validation ...