Unrated severityNVD Advisory· Published Nov 26, 2005· Updated Apr 16, 2026

CVE-2005-3823

Description

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function.

Affected products

Vtiger/Vtiger CRM
cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*
Range: <=4.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/17693nvdVendor Advisory
marc.infonvd
securitytracker.com/idnvd
www.securityfocus.com/archive/1/417711/30/0/threadednvd
www.securityfocus.com/bid/15569nvd
www.vupen.com/english/advisories/2005/2569nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000