ID de Prueba:	1.3.6.1.4.1.25623.1.0.804748
Categoría:	Web application abuses
Título:	vTiger CRM 'file' Arbitrary File Disclosure Vulnerability
Resumen:	Vtiger CRM is prone to arbitrary file disclosure vulnerability.
Descripción:	Summary: Vtiger CRM is prone to arbitrary file disclosure vulnerability. Vulnerability Insight: Flaw is due to the /kcfinder/browse.php script not properly sanitizing user input, specifically path traversal style attacks (e.g. '../') supplied via the 'file' parameter. Vulnerability Impact: Successful exploitation will allow an authenticated remote attacker to gain access to arbitrary files. Affected Software/OS: Vtiger CRM version 6.0.0 and prior. Solution: Apply the patch 'Vtiger CRM 6.0.0 Security patch 1' or upgrade to the latest version. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1222 Bugtraq: 20140312 CVE-2014-1222 - Local File Inclusion in Vtiger CRM (Google Search) http://www.securityfocus.com/archive/1/531423/100/0/threaded https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1222/
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.