Unrated severityNVD Advisory· Published Nov 26, 2005· Updated Jun 16, 2026

CVE-2005-3823

Description

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vtiger/Vtigercrm
cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*
Range: <=4.2
Vtiger/vTigerllm-fuzzy
Range: <=4.2

Patches

Vulnerability mechanics

References

secunia.com/advisories/17693nvdVendor Advisory
marc.infonvd
securitytracker.com/idnvd
www.securityfocus.com/archive/1/417711/30/0/threadednvd
www.securityfocus.com/bid/15569nvd
www.vupen.com/english/advisories/2005/2569nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000