Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sugarcrm sugarcrm vulnerabilities and exploits
(subscribe to this query)
578
VMScore
CVE-2019-17312
SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2 allows directory traversal in the file function by a Regular user.
Sugarcrm Sugarcrm
578
VMScore
CVE-2019-17313
SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2 allows directory traversal in the Studio module by a Developer user.
Sugarcrm Sugarcrm
578
VMScore
CVE-2019-17314
SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2 allows directory traversal in the Configurator module by an Admin user.
Sugarcrm Sugarcrm
578
VMScore
CVE-2019-17316
SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2 allows PHP object injection in the Import module by a Regular user.
Sugarcrm Sugarcrm
578
VMScore
CVE-2019-17317
SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user.
Sugarcrm Sugarcrm
578
VMScore
CVE-2019-17319
SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2 allows SQL injection in the Emails module by a Regular user.
Sugarcrm Sugarcrm
NA
CVE-2023-35808
An issue exists in SugarCRM Enterprise prior to 11.0.6 and 12.x prior to 12.0.3. An Unrestricted File Upload vulnerability has been identified in the Notes module. By using crafted requests, custom PHP code can be injected and executed through the Notes module because of missing ...
Sugarcrm Sugarcrm
NA
CVE-2023-35809
An issue exists in SugarCRM Enterprise prior to 11.0.6 and 12.x prior to 12.0.3. A Bean Manipulation vulnerability has been identified in the REST API. By using a crafted request, custom PHP code can be injected through the REST API because of missing input validation. Regular us...
Sugarcrm Sugarcrm
668
VMScore
CVE-2014-3244
XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM prior to 6.5.17 allows remote malicious users to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
Sugarcrm Sugarcrm
445
VMScore
CVE-2004-1226
SugarCRM Sugar Sales 2.0.1c and previous versions allows remote malicious users to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter.
Sugarcrm Sugarcrm
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
TCP
CVE-2024-4577
CVE-2024-2695
CVE-2024-31870
injection
CVE-2024-3813
arbitrary code
CVE-2024-27801
CVE-2024-30120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »