CVEvulnerability
CVE-2009-3248
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php.
Affected configurations
• vtiger vtiger crm 5.0.4
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://marc.info/?l=bugtraq&m=125060676515670&w=2 Exploit
- http://secunia.com/advisories/36309 Vendor Advisory
- http://www.exploit-db.com/exploits/9450 www.exploit-db.com
- http://www.osvdb.org/57238 Exploit
- http://www.securityfocus.com/bid/36062 Exploit
- http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/ Exploit
- http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt Exploit
- http://www.vupen.com/english/advisories/2009/2319 Vendor Advisory
- http://marc.info/?l=bugtraq&m=125060676515670&w=2 Exploit
- http://secunia.com/advisories/36309 Vendor Advisory
- http://www.exploit-db.com/exploits/9450 www.exploit-db.com
- http://www.osvdb.org/57238 Exploit
- http://www.securityfocus.com/bid/36062 Exploit
- http://www.ush.it/2009/08/18/vtiger-crm-504-multiple-vulnerabilities/ Exploit
- http://www.ush.it/team/ush/hack-vtigercrm_504/vtigercrm_504.txt Exploit
- http://www.vupen.com/english/advisories/2009/2319 Vendor Advisory