CVE-2014-2268 views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X...
MediumCVSS 5.0
EPSS 31.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code via the db_name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vtiger crm | = 1.0 | No fix listed |
| vtiger crm | = 2.0 | No fix listed |
| vtiger crm | = 2.0.1 | No fix listed |
| vtiger crm | = 2.1 | No fix listed |
| vtiger crm | = 3.0 | No fix listed |
| vtiger crm | = 3.0-beta | No fix listed |
| vtiger crm | = 3.2 | No fix listed |
| vtiger crm | = 4 | No fix listed |
| vtiger crm | = 4-beta | No fix listed |
| vtiger crm | = 4-rc1 | No fix listed |
| vtiger crm | = 4.0 | No fix listed |
| vtiger crm | = 4.0.1 | No fix listed |
| vtiger crm | = 4.2 | No fix listed |
| vtiger crm | = 4.2.4 | No fix listed |
| vtiger crm | = 5.0.0 | No fix listed |
| vtiger crm | = 5.0.1 | No fix listed |
| vtiger crm | = 5.0.2 | No fix listed |
| vtiger crm | = 5.0.3 | No fix listed |
| vtiger crm | = 5.0.4 | No fix listed |
| vtiger crm | = 5.0.4-rc | No fix listed |
| vtiger crm | = 5.1.0 | No fix listed |
| vtiger crm | = 5.1.0-rc | No fix listed |
| vtiger crm | = 5.2.0 | No fix listed |
| vtiger crm | = 5.2.1 | No fix listed |
| vtiger crm | = 5.3.0 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| vtiger crm | = 5.4.0 | No fix listed |
| vtiger crm | = 6.0.0 | No fix listed |
| vtiger crm | = 6.0.0-beta | No fix listed |
| vtiger crm | = 6.0.0-rc | No fix listed |
| vtiger crm | = 6.0.0-sp1 | No fix listed |
References
- [Vtigercrm-developers] 20140316 IMP: forgot password and re-installation security fix mailing-list vendor-advisory
- 32794 exploit third-party-advisory
- 66757 third-party-advisory vdb-entry
- www.navixia.com exploit third-party-advisory