CVE-2012-4867

Directory traversal vulnerability in modules/comvtigerworkflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote attackers to read arbitrary files via a .. dot dot in the modulename parameter...

Vtiger CRM LFI Vulnerability (Aug 2012) - Active Check

Vtiger CRM is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

vtiger CRM 5.2.0 LFI

Local file include vulnerability in vtiger CRM include/utils/utils.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.0.4 LFI

Local file include vulnerability in vtiger CRM graph.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.1.0 - Local File Inclusion

vTiger CRM 5.1.0 - Local File Inclusion Exploit Title: VTiger CRM Google Dork: None Date: 20/03/2012 Author: Pi3rrot Software Link: http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.1.0/ Version: 5.1.0 Tested on: CentOS 6 CVE : none We have find this vulnerabilitie in VTiger 5.1.0 ...

vtiger CRM 5.1.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: VTiger CRM Google Dork: None Date: 20/03/2012 Author: Pi3rrot Software Link: http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.1.0/ Version: 5.1.0 Tested on: CentOS 6 CVE : none We have find this vulnerabilitie in...

vtiger CRM 5.2.1 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................vtiger CRM 5.2.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vtiger.com/...

vTiger CRM 5.1.0 - Local File Inclusion

Exploit Title: VTiger CRM Google Dork: None Date: 20/03/2012 Author: Pi3rrot Software Link: http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.1.0/ Version: 5.1.0 Tested on: CentOS 6 CVE : none We have find this vulnerabilitie in VTiger 5.1.0 In this example, you can see a Local fil...

Vtiger 5.1.0 Local File Inclusion

Exploit Title: VTiger CRM Google Dork: None Date: 20/03/2012 Author: Pi3rrot Software Link: http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.1.0/ Version: 5.1.0 Tested on: CentOS 6 CVE : none We have find this vulnerabilitie in VTiger 5.1.0 In this example, you can see a Local fil...

Vtiger 5.1.0 LFI

Exploit for php platform in category web applications Exploit Title: VTiger CRM Google Dork: None Date: 20/03/2012 Author: Pi3rrot Software Link: http://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%205.1.0/ Version: 5.1.0 Tested on: CentOS 6 CVE : none We have find this vulnerabilitie in...

vtiger CRM 5.1.0 LFI

Local file include vulnerability in vtiger CRM sortfieldsjson.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Vtiger CRM <= 5.2.1 Authentication Bypass Vulnerability - Active Check

Vtiger CRM is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vtiger:vtigercrm";...

CVE-2011-4679

vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...

CVE-2011-4680

Multiple cross-site scripting XSS vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...

CVE-2011-4679

vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...

CVE-2011-4680

Multiple cross-site scripting XSS vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4680

CVE-2011-4680 describes multiple XSS vulnerabilities in the vtiger CRM customer portal prior to version 5.2.0. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the affected product (vtiger CRM) and the affected compon...

CVE-2011-4679

CVE-2011-4679 affects vtiger CRM prior to 5.3.0. The issue: the Leads module fails to properly recognize a field’s disabled status, allowing remote authenticated users to bypass access restrictions by reading a previously created report. Affected product/version: vtiger CRM