CVE-2009-3257 | BDVDB-2026-38573 Detail

Description#

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/36309
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055

Exploit#

No public exploit known

History#

Version 12009-09-18Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.