Security Advisory
CVE-2005-3824
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The uploads module in vTiger CRM 4.2 and earlier allows remote attackers to upload arbitrary files, such as PHP files, via the add2db action.