CVE-2009-3250

CRITICAL 9.0CVE-2009-3250 · Published 18/09/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
vtiger crm vtiger	`= 5.0.4`	No fix yet

Description

The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/.

References

marc.info
secunia.com/advisories/36309 · Vendor Advisory
exploit-db.com/exploits/9450
osvdb.org/57237
securityfocus.com/bid/36062 · Exploit
ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities · Exploit
ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt · Exploit
vupen.com/english/advisories/2009/2319 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free