Описание
Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions in the /cashe/mails folder.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.2.4 (включая)
cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.00636
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions in the /cashe/mails folder.
EPSS
Процентиль: 70%
0.00636
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other