CVE-2006-4617 File upload in n/a
Remote attackers can upload and execute arbitrary files in vtiger CRM, leading to potential system compromise.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-4617?
CVE-2006-4617 is a high-severity vulnerability in Vtiger Vtiger Crm, published on 7 Sep 2006. It can be exploited over the network, with no action from the victim.
Official description
Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions in the /cashe/mails folder.
Which versions are affected by CVE-2006-4617?
It affects 1 product.
Products include Vtiger Vtiger Crm.
How do I fix CVE-2006-4617?
No fix has been published for CVE-2006-4617 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-4617 being exploited?
There is no known exploitation of CVE-2006-4617 in the wild and no public exploit code.
Other vulnerabilities in Vtiger Vtiger Crm
Sources
Also known as GHSA-c8hg-f78f-3gcp.