CVE-2014-2268: Undefined Security Weakness

views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code via the dbname...

PT-2014-4595

Name of the Vulnerable Software and Affected Versions vTiger versions 6.0 before Security Patch 2 Description The issue is related to improper access restriction in the views/Index.php file within the Install module. This allows remote attackers to re-install the application by setting the...