EDB-27279

PoC

vTiger CRM 5.4.0 SOAP - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor EgiXpublished 2013-08-02catalog exploit_db

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-3215US	critical9.8	68.8% (99th)	Exploit	2020-01-29
vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.
CVE-2013-3214US	critical9.8	84.5% (100th)	Exploit	2020-01-28
vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
CVE-2013-3212US	high8.1	7.54% (94th)	Exploit	2020-01-28
vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote attackers to view files and execute local script code.
CVE-2013-3213US	high7.5	3.11% (88th)	Exploit	2014-04-02
Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 through 5.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) picklist_name parameter in the get_pic…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.