Re: vTiger CRM 5.2.x = Remote Code Execution Vulnerability

2011-10-06 Thread Steven Nuhn
YGN Ethical Hacker Group li...@yehg.net wrote: vTiger CRM 5.2.x = Remote Code Execution Vulnerability 1. OVERVIEW The vTiger CRM 5.2.1 and lower versions are vulnerable to Remote Code Execution. No fixed version has been released as of 2011-10-05. 2. BACKGROUND vtiger CRM is a free, full

vTiger CRM 5.2.x = Remote Code Execution Vulnerability

2011-10-05 Thread YGN Ethical Hacker Group
vTiger CRM 5.2.x = Remote Code Execution Vulnerability 1. OVERVIEW The vTiger CRM 5.2.1 and lower versions are vulnerable to Remote Code Execution. No fixed version has been released as of 2011-10-05. 2. BACKGROUND vtiger CRM is a free, full-featured, 100% Open Source CRM software ideal