CVE-2013-3214
CVE-2013-3214
Vexday Risk Score
60Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 84.5%KEV nãoPoC públicaNuclei —Metasploit simPatch —
Lifecycle
26 Mar 2013Metasploit module available
02 Aug 2013Public PoC
28 Jan 2020Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.
Affected products
n/a · n/apublic PoCs found — 4
githubgithub.com/shadofren/CVE-2013-3214★ 0cve_referencewww.exploit-db.com/exploits/30787unverifiedexploitdbwww.exploit-db.com/exploits/30787unverifiedexploitdbwww.exploit-db.com/exploits/27279unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.