Vulnerability Description
Incomplete blacklist vulnerability in config.template.php in vtiger CRM before 5.2.1 allows remote authenticated users to execute arbitrary code by using the draft save feature in the Compose Mail component to upload a file with a .phtml extension, and then accessing this file via a direct request to the file in the storage/ directory tree.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vtiger | Vtiger Crm | All versions |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/42246Vendor Advisory
- http://vtiger.com/blogs/2010/11/16/vtiger-crm-521-is-released/
- http://wiki.vtiger.com/index.php/Vtiger521:Release_Notes
- http://www.securityfocus.com/archive/1/514846/100/0/threaded
- http://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt
- http://secunia.com/advisories/42246Vendor Advisory
- http://vtiger.com/blogs/2010/11/16/vtiger-crm-521-is-released/
- http://wiki.vtiger.com/index.php/Vtiger521:Release_Notes
- http://www.securityfocus.com/archive/1/514846/100/0/threaded
- http://www.ush.it/team/ush/hack-vtigercrm_520/vtigercrm_520.txt
FAQ
What is CVE-2010-3909?
CVE-2010-3909 is a vulnerability with a CVSS score of 6.0 (MEDIUM). Incomplete blacklist vulnerability in config.template.php in vtiger CRM before 5.2.1 allows remote authenticated users to execute arbitrary code by using the draft save feature in the Compose Mail com...
How severe is CVE-2010-3909?
CVE-2010-3909 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-3909?
Check the references section above for vendor advisories and patch information. Affected products include: Vtiger Vtiger Crm.