Vtiger 6.3.0 Remote Code Execution Exploit CVE-2016-1713
Vtiger 6.3.0 CRM's administration interface allows for the upload of a company logo. Instead of uploading an image, an attacker may choose to upload a
file containing PHP code and run this code by accessing the resulting PHP file. This module was tested against vTiger CRM v6.3.0.
https://github.com/C0reL0ader/EaST/bl...
Free exploit pack: http://eastfw.com/