Unrated severityNVD Advisory· Published Apr 22, 2014· Updated Jun 17, 2026

CVE-2014-2269

Description

modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters.

Affected products

Vtiger/Vtigercrm
cpe:2.3:a:vtiger:vtiger_crm:6.0.0:*:*:*:*:*:*:*
Vtiger/vTigerllm-fuzzy
Range: 6.0 before Security Patch 2

Patches

Vulnerability mechanics

References

vtiger-crm.2324883.n4.nabble.com/Vtigercrm-developers-IMP-forgot-password-and-re-installation-security-fix-tt9786.htmlnvdPatch
www.securityfocus.com/bid/66758nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.013
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000