CVE-2008-3458

MEDIUM 5.0CVE-2008-3458 · Published 04/08/2008 · updated 16/06/2026

In short

CVE-2008-3458 is a MEDIUM (CVSS 5.0) vulnerability affecting vtiger crm (vtiger).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
vtiger crm vtiger	`≤ 5.0.3`	No fix yet

Description

Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read mail merge templates via a direct request to the wordtemplatedownload directory.

References

secunia.com/advisories/28370 · Third Party Advisory
sourceforge.net/project/shownotes.php · Broken Link
trac.vtiger.com/cgi-bin/trac.cgi/changeset/11811 · Exploit
trac.vtiger.com/cgi-bin/trac.cgi/ticket/2107 · Vendor Advisory
wiki.vtiger.com/index.php/Vtiger_CRM_5.0.4_-_Release_Notes · Vendor Advisory
osvdb.org/40218 · Broken Link
securityfocus.com/bid/27228 · Patch

More vulnerabilities in vtiger crm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

vtiger crm

vtiger

≤ 5.0.3

No fix yet

More vulnerabilities in vtiger crm

See all →