CVE-2005-3823

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which…

published November 26, 2005

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01705 · 77.1th percentile
Published
2005-11-26T02:00Z
EPSS history
Timeline
  • 26 NOV 02:00Z
    The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which…
    cvelistv5