CVE-2013-5692: Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators t...

Security readout for executives and security teams

CVE-2013-5692 affects X2Engine X2CRM versions before 3.5. An authenticated administrator could abuse the translation manager to include and execute local files. The risk is mainly for exposed or poorly governed admin access, especially where admin credentials are shared, weak, or compromised. Organizations are likely exposed only if they run X2Engine X2CRM before 3.5 and permit administrator access to the affected application. Internet-facing admin portals, weak admin controls, or legacy unmaintained CRM deployments increase practical risk. Prioritize remediation if X2CRM is still in use, especially on internet-facing systems. The vulnerability requires administrator authentication, but successful abuse could execute local files, making compromised or overprivileged admin access a serious business risk. Mitigation focus: Upgrade X2Engine X2CRM deployments from versions before 3.5 after confirming vendor guidance.; Restrict administrative access to trusted users and networks.; Review and remove unnecessary administrator accounts..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.