EDB-46065

PoC

Vtiger CRM 7.1.0 - Remote Code Execution

view exploit source exploit_dbtype webappsauthor AkkuSpublished 2019-01-02catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-5009UShigh7.2Exploit
Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with the extension "php3" in the logo upload field, if the uploaded file is in PNG format and has a size of 150x40. One can p…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan