← back
CVE-2009-3249

CVE-2009-3249

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 9.6%
from disclosure to weapon0 days
Published on NVDSep 18
1st PoCAug 18
exploitation probability
9.6%top 5% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the module parameter to graph.php; or the (2) module or (3) file parameter to include/Ajax/CommonAjax.php, reachable through modules/Campaigns/CampaignsAjax.php, modules/SalesOrder/SalesOrderAjax.php, modules/System/SystemAjax.php, modules/Products/ProductsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.php, modules/Notes/NotesAjax.php, modules/Faq/FaqAjax.php, modules/Quotes/QuotesAjax.php, modules/Utilities/UtilitiesAjax.php, modules/Calendar/ActivityAjax.php, modules/Calendar/CalendarAjax.php, modules/PurchaseOrder/PurchaseOrderAjax.php, modules/HelpDesk/HelpDeskAjax.php, modules/Invoice/InvoiceAjax.php, modules/Accounts/AccountsAjax.php, modules/Reports/ReportsAjax.php, modules/Contacts/ContactsAjax.php, and modules/Portal/PortalAjax.php; and allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the step parameter in an Import action to the (4) Accounts, (5) Contacts, (6) HelpDesk, (7) Leads, (8) Potentials, (9) Products, or (10) Vendors module, reachable through index.php and related to modules/Import/index.php and multiple Import.php files.
Affected products
n/a · n/a
public PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16280exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9450cve_referencewww.exploit-db.com/exploits/9450unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=125060676515670&w=2http://secunia.com/advisories/36309http://securityreason.com/securityalert/8118http://www.exploit-db.com/exploits/9450http://www.osvdb.org/57239http://www.securityfocus.com/bid/36062http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txthttp://www.vupen.com/english/advisories/2009/2319