exploit/multi/http/vtiger_logo_upload_exec

weaponized

Vtiger CRM - Authenticated Logo Upload RCE

view exploit source metasploittype exploitpublished 2015-09-28catalog metasploit
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-6000UShigh8.8Exploit
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earl…
CVE-2016-1713UShigh7.3Exploit
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows r…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan