CVE-2014-2268

views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the…

published November 16, 2014

CVSS

—

EPSS

31%

Percentile

98.3

In the wild

Unconfirmed

What it is

views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code via the db_name parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.31212 · 98.3th percentile
Published: 2014-11-16T01:00Z

EPSS history

Timeline

16 NOV 01:00Z
views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the…
cvelistv5