CVE-2016-1713
HIGHVtiger CRM 6.4.0 - RCE
Title source: llmDescription
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows remote authenticated users to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in test/logo/. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6000.
Exploits (3)
exploitdb
WORKING POC
by Benjamin Daniel Mussler · textwebappsphp
https://www.exploit-db.com/exploits/38345
metasploit
WORKING POC
EXCELLENT
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vtiger_logo_upload_exec.rb
References (4)
Scores
CVSS v3
7.3
EPSS
0.6194
EPSS Percentile
98.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-434
Status
published
Products (1)
vtiger/vtiger_crm
6.4.0
Published
Apr 14, 2017
Tracked Since
Feb 18, 2026