sugarcrm sugarcrm 6.5.26 vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the default_currency_name parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, t...

Sugarcrm Sugarcrm 6.5.26

An issue exists in SugarCRM prior to 7.7.2.3, 7.8.x prior to 7.8.2.2, and 7.9.x prior to 7.9.2.0 (and Sugar Community Edition 6.5.26). A remote file inclusion has been identified in the Connectors module allowing authenticated users to include remotely accessible system files via...

Sugarcrm Sugarcrm 7.9.1.0 Sugarcrm Sugarcrm 7.9.0.1 Sugarcrm Sugarcrm Sugarcrm Sugarcrm 6.5.26 Sugarcrm Sugarcrm 7.8.0.1 Sugarcrm Sugarcrm 7.8.0.0 Sugarcrm Sugarcrm 7.8.2.0 Sugarcrm Sugarcrm 7.8.1.0 Sugarcrm Sugarcrm 7.9.0.0 Sugarcrm Sugarcrm 7.8.2.1

An issue exists in SugarCRM prior to 7.7.2.3, 7.8.x prior to 7.8.2.2, and 7.9.x prior to 7.9.2.0 (and Sugar Community Edition 6.5.26). Several areas have been identified in the Documents and Emails module that could allow an authenticated user to perform SQL injection, as demonst...

Sugarcrm Sugarcrm 6.5.26 Sugarcrm Sugarcrm 7.8.0.1 Sugarcrm Sugarcrm 7.8.0.0 Sugarcrm Sugarcrm 7.8.2.0 Sugarcrm Sugarcrm 7.8.1.0 Sugarcrm Sugarcrm 7.9.0.0 Sugarcrm Sugarcrm 7.8.2.1 Sugarcrm Sugarcrm 7.9.1.0 Sugarcrm Sugarcrm 7.9.0.1 Sugarcrm Sugarcrm

An issue exists in SugarCRM prior to 7.7.2.3, 7.8.x prior to 7.8.2.2, and 7.9.x prior to 7.9.2.0 (and Sugar Community Edition 6.5.26). The WebToLeadCapture functionality is found vulnerable to unauthenticated cross-site scripting (XSS) attacks. This attack vector is mitigated by ...

Sugarcrm Sugarcrm 7.9.1.0 Sugarcrm Sugarcrm 7.9.0.1 Sugarcrm Sugarcrm Sugarcrm Sugarcrm 6.5.26 Sugarcrm Sugarcrm 7.8.0.1 Sugarcrm Sugarcrm 7.8.0.0 Sugarcrm Sugarcrm 7.8.2.0 Sugarcrm Sugarcrm 7.8.1.0 Sugarcrm Sugarcrm 7.9.0.0 Sugarcrm Sugarcrm 7.8.2.1

Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack on a targeted system.

Sugarcrm Sugarcrm

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook