Fat Free CRM Multiple Security Vulnerabilities
BID:64519
Info
Fat Free CRM Multiple Security Vulnerabilities
| Bugtraq ID: | 64519 |
| Class: | Unknown |
| CVE: |
CVE-2013-7222 CVE-2013-7223 CVE-2013-7224 CVE-2013-7225 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 24 2013 12:00AM |
| Updated: | Dec 31 2013 01:09AM |
| Credit: | joernchen |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Fat Free CRM Multiple Security Vulnerabilities
Fat Free CRM is prone to multiple SQL-injection, cross-site request-forgery and information-disclosure vulnerabilities.
An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, obtain sensitive information, execute arbitrary code in the context of the webserver.
Fat Free CRM is prone to multiple SQL-injection, cross-site request-forgery and information-disclosure vulnerabilities.
An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, obtain sensitive information, execute arbitrary code in the context of the webserver.
Exploit / POC
Fat Free CRM Multiple Security Vulnerabilities
Attackers can exploit these issues using browser.
Attackers can exploit these issues using browser.
Solution / Fix
Fat Free CRM Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Fat Free CRM Multiple Security Vulnerabilities
References:
References: