CVE-2014-2268
vtiger CRM < Security Patch 2 - Unauthenticated Remote Code Execution via Install Module Re-Installation
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2014-2268.
PoCs published by Metasploit, including Metasploit module exploits/multi/http/vtiger_install_rce.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated remote command execution vulnerability in Vtiger CRM by injecting PHP payloads into the database configuration during the installation process. It leverages the 'Step5' and 'Step7' modes to execute arbitrary commands.
Description
views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code via the db_name parameter.
Exploits (2)
This Metasploit module exploits an unauthenticated remote command execution vulnerability in Vtiger CRM by injecting PHP payloads into the database configuration during the installation process. It leverages the 'Step5' and 'Step7' modes to execute arbitrary commands.
This Metasploit module exploits an unauthenticated remote command execution vulnerability in Vtiger CRM's install script by injecting PHP code into the database configuration step. The exploit triggers payload execution via a crafted GET request, leveraging the application's installation process to achieve RCE.