CVE-2014-1222 Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter....
MediumCVSS 4.0
EPSS 8.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter in a download action. NOTE: it is likely that this issue is actually in the KCFinder third-party component, and it affects additional products besides Vtiger CRM.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vtiger crm | <= 6.0.0 | No fix listed |
References
- sourceforge.net patch
- 20140312 CVE-2014-1222 - Local File Inclusion in Vtiger CRM mailing-list
- www.portcullis-security.com exploit