cve/cves/2009/CVE-2009-3248.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00

Files

T

0xMarcio 81017c9871 Expand CVE PoC coverage and metadata

2026-09-01 19:01:07 +02:00

767 B

Raw Permalink Blame History

CVE-2009-3248

Description

Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php.

POC

Reference

http://www.exploit-db.com/exploits/9450

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/9450

767 B Raw Permalink Blame History