PT-2020-7873 · Vtiger · Vtiger Crm

Benjamin Daniel Mussler · Published 2020-02-06 · Updated 2025-08-19 · CVE-2015-6000

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Vtiger CRM versions 6.3.0 and earlier

Description: The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the test/logo/ directory, and then accessing it via a direct request. This is due to an unrestricted file upload vulnerability in the Settings Vtiger CompanyDetailsSave Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php.

Recommendations: For versions 6.3.0 and earlier, consider restricting access to the test/logo/ directory and disabling the file upload functionality in the Settings Vtiger CompanyDetailsSave Action class until a patch is available. As a temporary workaround, avoid using executable file extensions for uploads.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2015-6000

Affected Products

Vtiger Crm

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vtiger_logo_upload_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/38345 · Exploit
• 🔥 http://b.fl7.de/2015/09/vtiger-crm-authenticated-rce-cve-2015-6000.html · Exploit
• 🔥 http://securityfocus.com//archive/1/536563/100/0/threaded · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-6000 · Security Note
• https://t.me/cvenotify/829 · Telegram Post