{"id":1467,"date":"2013-03-26T11:09:16","date_gmt":"2013-03-26T18:09:16","guid":{"rendered":"https:\/\/www.vtiger.com\/blogs\/?p=1467"},"modified":"2023-07-13T21:37:59","modified_gmt":"2023-07-13T16:07:59","slug":"vtiger-5-4-0-security-patch-released","status":"publish","type":"post","link":"https:\/\/www.vtiger.com\/blog\/archives\/vtiger-5-4-0-security-patch-released\/","title":{"rendered":"Vtiger 5.4.0 Security Patch Released"},"content":{"rendered":"

***April 2nd, 2012 UPDATE: Some users may experience performance issues after applying the security patch below. If you do experience performance issues, please download and apply this patch<\/a> after applying the security patch.<\/strong><\/p>\n

As many of you are aware, Vtiger CRM Open Source 6.0 is still under development and is slated for a May release. For those currently using Vtiger CRM Open Source 5.4, we would like to recommend applying a new security patch, which fixes a series of vulnerabilities reported by Mr. Nick Freeman from security-assessment.com<\/a> and Mr. Egidio. The patch covers the following discovered vulnerabilities:<\/p>\n

Local File Inclusion
\nLocal File Deletion
\nSQL Injection
\nPHP Code Injection
\nCross site scripting
\nArbitrary File Upload
\nAuthentication Bypass vulnerabilities(SOAP API’s)<\/p>\n

1. Before deploying the patch<\/strong><\/p>\n

It is essential to have an available backup of your Vtiger installation in the result of any errors. To do this, create a copy of the entire Vtiger folder, and place it in a different location. As there is no database change in this particular case, a database dump is unnecessary.<\/p>\n

2. Obtaining the patch files<\/strong>
\nDownload the patch files from:
\nSourceForge<\/a> Vtiger Link<\/p>\n

3. Upload the patch files to your Vtiger CRM 5.4.0 folder<\/strong><\/p>\n

4. Extract the patch files to that directory, overwriting any files as necessary<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

***April 2nd, 2012 UPDATE: Some users may experience performance issues after applying the security patch below. If you do experience performance issues, please download and apply this patch after applying the security patch. As many of you are aware, Vtiger CRM Open Source 6.0 is still under development and is slated for a May release.… .Vtiger 5.4.0 Security Patch Released<\/span><\/a><\/p>\n","protected":false},"author":28,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","neve_meta_reading_time":"","_themeisle_gutenberg_block_has_review":false,"_ti_tpc_template_sync":false,"_ti_tpc_template_id":"","footnotes":""},"categories":[3],"tags":[],"class_list":["post-1467","post","type-post","status-publish","format-standard","hentry","category-all"],"yoast_head":"\nVtiger 5.4.0 Security Patch Released - Vtiger CRM Blog<\/title>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vtiger 5.4.0 Security Patch Released - Vtiger CRM Blog\" \/>\n<meta property=\"og:description\" content=\"***April 2nd, 2012 UPDATE: Some users may experience performance issues after applying the security patch below. If you do experience performance issues, please download and apply this patch after applying the security patch. As many of you are aware, Vtiger CRM Open Source 6.0 is still under development and is slated for a May release.… .Vtiger 5.4.0 Security Patch Released\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/\" \/>\n<meta property=\"og:site_name\" content=\"Vtiger CRM Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/vtiger\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-13T16:07:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.vtiger.com\/blog\/wp-content\/uploads\/2023\/02\/vtiger-logo-only.png\" \/>\n\t<meta property=\"og:image:width\" content=\"490\" \/>\n\t<meta property=\"og:image:height\" content=\"399\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kieran Kay\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@vtigercrm\" \/>\n<meta name=\"twitter:site\" content=\"@vtigercrm\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kieran Kay\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vtiger 5.4.0 Security Patch Released - Vtiger CRM Blog","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"Vtiger 5.4.0 Security Patch Released - Vtiger CRM Blog","og_description":"***April 2nd, 2012 UPDATE: Some users may experience performance issues after applying the security patch below. If you do experience performance issues, please download and apply this patch after applying the security patch. As many of you are aware, Vtiger CRM Open Source 6.0 is still under development and is slated for a May release.… .Vtiger 5.4.0 Security Patch Released","og_url":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/","og_site_name":"Vtiger CRM Blog","article_publisher":"https:\/\/www.facebook.com\/vtiger","article_modified_time":"2023-07-13T16:07:59+00:00","og_image":[{"width":490,"height":399,"url":"https:\/\/www.vtiger.com\/blog\/wp-content\/uploads\/2023\/02\/vtiger-logo-only.png","type":"image\/png"}],"author":"Kieran Kay","twitter_card":"summary_large_image","twitter_creator":"@vtigercrm","twitter_site":"@vtigercrm","twitter_misc":{"Written by":"Kieran Kay","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/#article","isPartOf":{"@id":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/"},"author":{"name":"Kieran Kay","@id":"https:\/\/www.vtiger.com\/blog\/#\/schema\/person\/dbbca39d57d0c1ce816573abb930d083"},"headline":"Vtiger 5.4.0 Security Patch Released","dateModified":"2023-07-13T16:07:59+00:00","mainEntityOfPage":{"@id":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/"},"wordCount":210,"commentCount":12,"publisher":{"@id":"https:\/\/www.vtiger.com\/blog\/#organization"},"articleSection":["All"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/","url":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/","name":"Vtiger 5.4.0 Security Patch Released - Vtiger CRM Blog","isPartOf":{"@id":"https:\/\/www.vtiger.com\/blog\/#website"},"dateModified":"2023-07-13T16:07:59+00:00","breadcrumb":{"@id":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.vtiger.com\/blog\/vtiger-5-4-0-security-patch-released\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.vtiger.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Vtiger 5.4.0 Security Patch Released"}]},{"@type":"WebSite","@id":"https:\/\/www.vtiger.com\/blog\/#website","url":"https:\/\/www.vtiger.com\/blog\/","name":"Vtiger CRM Blog","description":"Latest CRM Topics, Tips, Insights and Updates","publisher":{"@id":"https:\/\/www.vtiger.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.vtiger.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.vtiger.com\/blog\/#organization","name":"Vtiger","url":"https:\/\/www.vtiger.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.vtiger.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.vtiger.com\/blog\/wp-content\/uploads\/2023\/02\/vtiger-logo-only.png","contentUrl":"https:\/\/www.vtiger.com\/blog\/wp-content\/uploads\/2023\/02\/vtiger-logo-only.png","width":490,"height":399,"caption":"Vtiger"},"image":{"@id":"https:\/\/www.vtiger.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/vtiger","https:\/\/twitter.com\/vtigercrm"]},{"@type":"Person","@id":"https:\/\/www.vtiger.com\/blog\/#\/schema\/person\/dbbca39d57d0c1ce816573abb930d083","name":"Kieran Kay","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.vtiger.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4ba6667aad460470f647844b4fbf4dfe?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4ba6667aad460470f647844b4fbf4dfe?s=96&d=mm&r=g","caption":"Kieran Kay"},"url":"https:\/\/www.vtiger.com\/blog\/author\/kieran\/"}]}},"_links":{"self":[{"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/posts\/1467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/comments?post=1467"}],"version-history":[{"count":1,"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/posts\/1467\/revisions"}],"predecessor-version":[{"id":17399,"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/posts\/1467\/revisions\/17399"}],"wp:attachment":[{"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/media?parent=1467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/categories?post=1467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vtiger.com\/blog\/wp-json\/wp\/v2\/tags?post=1467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}