CVE-2005-3823

Published: Nov 26, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function.

Affected (1)

Products: Vtiger: Vtiger Crm

Vtiger

1 product

Vtiger Crm

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vtiger Vtiger Crm	Up to 4.2

References (12)

http://marc.info/?l=full-disclosure&m=113290708121951&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17693

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015274

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/417711/30/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15569

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2569

Source: cve@mitre.org

http://marc.info/?l=full-disclosure&m=113290708121951&w=2