CVE

Id
20692  
CVE No.
CVE-2006-4588  
Status
Candidate  
Description
vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modules via a direct request to index.php with a modified module parameter, as demonstrated using the Settings module.  
Phase
Assigned (20060906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
195366 20692 CVE-2006-4588 MISC:http://www.security-net.biz/adv/D3906a.txt  View
195367 20692 CVE-2006-4588 BID:19829  View
195368 20692 CVE-2006-4588 URL:http://www.securityfocus.com/bid/19829  View
195369 20692 CVE-2006-4588 VUPEN:ADV-2006-3444  View
195370 20692 CVE-2006-4588 URL:http://www.vupen.com/english/advisories/2006/3444  View
195371 20692 CVE-2006-4588 OSVDB:28462  View
195372 20692 CVE-2006-4588 URL:http://www.osvdb.org/28462  View
195373 20692 CVE-2006-4588 SECUNIA:21728  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59789 JVNDB-2006-002055 Jetstat.com JS ASP Faq Manager の admin/default.asp における SQL インジェクションの脆弱性 Jetstat.com JS ASP Faq Manager の admin/default.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4590 20692 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002055.html  View