| Package | Affected versions | Patched versions |
|---|---|---|
| vtiger crm | = 7.5.0 |
modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected endpoint allows them to write this code to the config.inc.php file (executed on every page load).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free