EDB-32794

functional

Vtiger - 'Install' Remote Command Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2014-04-10catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-2268USmedium5.0Exploit
views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a req…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan