CVEs-PoC/2015/CVE-2015-5948.md

CVE-2015-5948

Description

Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5947.

POC

Reference

• https://github.com/XiphosResearch/exploits/tree/master/suiteshell
• https://github.com/salesagility/SuiteCRM/issues/333

Github

No PoCs found on GitHub currently.