CVE-2014-7986

Name of the Vulnerable Software and Affected Versions EsppoCRM versions prior to 2.6.0

Description The issue allows remote attackers to re-install the application. This can be achieved by setting the installProcess parameter to 1 in the install/index.php file.

Recommendations For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the install/index.php file to prevent unauthorized re-installation of the application.