Unrated severityNVD Advisory· Published Feb 6, 2020· Updated Aug 6, 2024
CVE-2015-6000
CVE-2015-6000
Description
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in test/logo/.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- b.fl7.de/2015/09/vtiger-crm-authenticated-rce-cve-2015-6000.htmlmitrex_refsource_MISC
- www.securityfocus.com//archive/1/536563/100/0/threadedmitrex_refsource_MISC
- www.exploit-db.com/exploits/38345/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.