CVE-2009-3248

Vtiger Crm - CSRF

Title source: rule
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by USH · textwebappsphp
https://www.exploit-db.com/exploits/9450

References (8)

Core 8
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/9450
Exploit mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=125060676515670&w=2
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/36062
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/57238
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36309
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/2319

Scores

EPSS 0.0032
EPSS Percentile 54.7%

Details

CWE
CWE-352
Status published
Products (1)
vtiger/vtiger_crm 5.0.4
Published Sep 18, 2009
Tracked Since Feb 18, 2026