sugarcrm sugar suite 3.5 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) prior to 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors.

Sugarcrm Sugar Suite 4.1 Sugarcrm Sugar Suite 4.2 Sugarcrm Sugar Suite 4.2.1 Sugarcrm Sugar Suite 4.0.1 Sugarcrm Sugar Suite 4.0 Beta Sugarcrm Sugar Suite 3.5 Sugarcrm Sugar Suite 3.5.1

5

CVSSv2

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and previous versions allows remote malicious users to include arbitrary local files via ".." sequences in the beanFiles array paramete...

Sugarcrm Sugar Suite 3.5 Sugarcrm Sugar Suite 4.0 Beta

2 EDB exploits

7.5

CVSSv2

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the beanFiles array parameter.

Sugarcrm Sugar Suite 3.5 Sugarcrm Sugar Suite 4.0 Beta

2 EDB exploits

6.4

CVSSv2

Sugar Suite Open Source (SugarCRM) 4.2 and previous versions, when register_globals is enabled, does not protect critical variables such as $_GLOBALS and $_SESSION from modification, which allows remote malicious users to conduct attacks such as directory traversal or PHP remote ...

Sugarcrm Sugarcrm 3.5 Sugarcrm Sugarcrm 4.0 Sugarcrm Sugarcrm 4.1 Sugarcrm Sugarcrm 4.2

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook