CVE-2009-3251

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.03%

Published

Sep 18, 2009

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

include/utils/ListViewUtils.php in vtiger CRM before 5.1.0 allows remote authenticated users to bypass intended access restrictions and read the (1) visibility, (2) location, and (3) recurrence fields of a calendar via a custom view.

Weaknesses (CWE)

CWE-264

Affected Products (1)

vtiger · vtiger_crmvulnerable

References (8)

http://secunia.com/advisories/36309

Third Party Advisory

http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407

PatchVendor Advisory

http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208

Issue TrackingVendor Advisory

http://www.osvdb.org/57241

Third Party Advisory

http://secunia.com/advisories/36309

Third Party Advisory

http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407

PatchVendor Advisory

http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208

Issue TrackingVendor Advisory

http://www.osvdb.org/57241

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs