CVE-2010-3910

Опубликовано: 26 нояб. 2010

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple directory traversal vulnerabilities in the return_application_language function in include/utils/utils.php in vtiger CRM before 5.2.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lang_crm parameter to phprint.php or (2) the current_language parameter in an Accounts Import action to graph.php.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*

Версия до 5.2.0 (включая)

cpe:2.3:a:vtiger:vtiger_crm:1.0:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:2.0:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:2.1:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:3:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:3.0:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:3.0:beta:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:3.2:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4:beta:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4:rc1:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4.0:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4.2:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4.2:*:validation:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:4.2.4:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:5.0.4:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:5.0.4:rc:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:vtiger:vtiger_crm:5.1.0:rc:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01899

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-hwx7-4wmc-24vv

github

больше 3 лет назад