CVE-2017-5219

An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager functionality, provided by SageCRM, permits additional components to be added to the application to enhance provided functionality. This functionality allows a zip file to be uploaded, containing a valid .ecf component file, which will be extracted to the inf directory outside of the webroot. By creating a zip file containing an empty .ecf file, to pass file-validation checks, any other file provided in zip file will be extracted onto the filesystem. In this case, a web shell with the filename '..\WWWRoot\CustomPages\aspshell.asp' was included within the zip file that, when extracted, traversed back out of the inf directory and into the SageCRM webroot. This permitted remote interaction with the underlying filesystem with the highest privilege level, SYSTEM.

• CWE-22

• http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/Third Party Advisory
• http://www.securityfocus.com/bid/95968Third Party Advisory, VDB Entry
• http://research.aurainfosec.io/disclosures/sagecrm-CVE-2017-5219-CVE-2017-5218/Third Party Advisory
• http://www.securityfocus.com/bid/95968Third Party Advisory, VDB Entry

Published

Feb 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5213Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected…
• CVE-2017-5214The Codextrous B2J Contact (aka b2j_contact) extension befor…
• CVE-2017-5215The Codextrous B2J Contact (aka b2j_contact) extension befor…
• CVE-2017-5216Stack-based buffer overflow vulnerability in Netop Remote Co…
• CVE-2017-5217Installing a zero-permission Android application on certain …
• CVE-2017-5218A SQL Injection issue was discovered in SageCRM 7.x before 7…
• CVE-2017-5223An issue was discovered in PHPMailer before 5.2.22. PHPMaile…
• CVE-2017-5225LibTIFF version 4.0.7 is vulnerable to a heap buffer overflo…8.8
• CVE-2017-5226When executing a program via the bubblewrap sandbox, the non…
• CVE-2017-5227QNAP QTS before 4.2.4 Build 20170313 allows local users to o…
• CVE-2017-5228All editions of Rapid7 Metasploit prior to version 4.13.0-20…
• CVE-2017-5229All editions of Rapid7 Metasploit prior to version 4.13.0-20…