CVE-2015-6000

Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in…

published February 6, 2020

CVSS

—

EPSS

40%

Percentile

98.6

In the wild

Unconfirmed

What it is

Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.3.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in test/logo/.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.40241 · 98.6th percentile
Published: 2020-02-06T13:55Z

EPSS history

Timeline

06 FEB 13:55Z
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in…
cvelistv5