NVD

Id
85283  
Name
CVE-2016-1713  
Description
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows remote authenticated users to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in test/logo/. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6000.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-04-27  
Published
2017-04-14  
Modified Date
2017-04-25  
Seq
2016-1713  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
415880 85283 CVE-2016-8960 http://www.ibm.com/support/docview.wss?uid=swg21993718  View
415881 85283 CVE-2016-8960 96963  View
415882 85283 CVE-2016-8960 http://www.ibm.com/support/docview.wss?uid=swg21993718  View
415883 85283 CVE-2016-8960 96963  View
418579 85283 CVE-2017-3625 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418580 85283 CVE-2017-3625 97769  View
418581 85283 CVE-2017-3625 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
418582 85283 CVE-2017-3625 97769  View

Related JVN