CVE-2005-3823

Description

The Users module in vTiger CRM 4.2 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to the eval function.

References

http://www.vupen.com/english/advisories/2005/2569

http://www.securityfocus.com/bid/15569

http://www.securityfocus.com/archive/1/417711/30/0/threaded

http://securitytracker.com/id?1015274

http://secunia.com/advisories/17693

http://marc.info/?l=full-disclosure&m=113290708121951&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS