CVE-2015-6000

This exploit demonstrates an authenticated remote code execution vulnerability in Vtiger CRM <= 6.3.0 by uploading a malicious PHP file disguised as a logo. The attacker can then execute arbitrary commands by accessing the uploaded file.

This Metasploit module exploits an authenticated file upload vulnerability in vTiger CRM 6.3.0, allowing an attacker to upload a malicious PHP file disguised as a logo and achieve remote code execution (RCE). The exploit handles authentication, CSRF token extraction, and payload delivery.