NVD

Id
50455  
Name
CVE-2009-3250  
Description
The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-09-18  
Modified Date
2009-09-21  
Seq
2009-3250  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255262 50455 CVE-2009-3250 20090818 Vtiger CRM 5.0.4 Multiple Vulnerabilities  View
255263 50455 CVE-2009-3250 9450  View
255264 50455 CVE-2009-3250 36062  View
255265 50455 CVE-2009-3250 http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/  View
255266 50455 CVE-2009-3250 http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt  View
255267 50455 CVE-2009-3250 ADV-2009-2319  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45310 JVNDB-2009-006317 vtiger CRM の Compose Mail 機能における任意のコードを実行される脆弱性 vtiger CRM の Compose Mail 機能の saveForwardAttachments 手順には、任意のコードを実行される脆弱性が存在します。 CVE-2009-3250 40681 CVE-2009-3250 50455 9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006317.html 2009-09-18 2012-12-20 View