Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sugarcrm vulnerabilities and exploits
(subscribe to this query)
4.6
CVSSv2
CVE-2015-5946
Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.
Sugarcrm Sugarcrm 6.5.22
2.1
CVSSv2
CVE-2017-5223
An issue exists in PHPMailer prior to 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directo...
Phpmailer Project Phpmailer
1 EDB exploit
87 Github repositories
7.5
CVSSv2
CVE-2016-10033
The mailSend function in the isMail transport in PHPMailer prior to 5.2.18 might allow remote malicious users to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.
Phpmailer Project Phpmailer
Wordpress Wordpress
Joomla Joomla\\!
9 EDB exploits
120 Github repositories
7.5
CVSSv2
CVE-2016-10045
The isMail transport in PHPMailer prior to 5.2.20 might allow remote malicious users to pass extra parameters to the mail command and consequently execute arbitrary code by leveraging improper interaction between the escapeshellarg function and internal escaping performed in the ...
Phpmailer Project Phpmailer
Wordpress Wordpress
Joomla Joomla\\!
3 EDB exploits
91 Github repositories
7.5
CVSSv2
CVE-2011-4833
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 prior to 6.1.7, 6.2 prior to 6.2.4, 6.3 prior to 6.3.0RC3, and 6.4 prior to 6.4.0beta1 allow remote malicious users to execute arbitrary SQL commands via the (1) where and (2) order parameters in a get_ful...
Sugarcrm Sugarcrm 6.2.1
Sugarcrm Sugarcrm 6.2.2
Sugarcrm Sugarcrm 6.1.3
Sugarcrm Sugarcrm 6.1.4
Sugarcrm Sugarcrm 6.3.0
Sugarcrm Sugarcrm 6.1.0
Sugarcrm Sugarcrm 6.4
Sugarcrm Sugarcrm 6.2.3
Sugarcrm Sugarcrm 6.1.5
Sugarcrm Sugarcrm 6.1.6
Sugarcrm Sugarcrm 6.2.0
Sugarcrm Sugarcrm 6.1.1
Sugarcrm Sugarcrm 6.1.2
1 EDB exploit
5
CVSSv2
CVE-2011-3803
SugarCRM 6.1.0 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layout_utils.php and certain other files.
Sugarcrm Sugarcrm 6.1.0
4
CVSSv2
CVE-2011-0745
SugarCRM prior to 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable thro...
Sugarcrm Sugarcrm 5.5
Sugarcrm Sugarcrm 4.1
Sugarcrm Sugarcrm 1.1b
Sugarcrm Sugarcrm 1.1c
Sugarcrm Sugarcrm 2.0.1c
Sugarcrm Sugarcrm 5.2.0g
Sugarcrm Sugarcrm 4.5.1i
Sugarcrm Sugarcrm 3.5.1
Sugarcrm Sugarcrm 5.2e
Sugarcrm Sugarcrm 5.0.0
Sugarcrm Sugarcrm 5.1.0
Sugarcrm Sugarcrm 6.0.2
Sugarcrm Sugarcrm 6.0.1
Sugarcrm Sugarcrm 6.0
Sugarcrm Sugarcrm 5.2h
Sugarcrm Sugarcrm 3.5
Sugarcrm Sugarcrm 1.0
Sugarcrm Sugarcrm 1.0f
Sugarcrm Sugarcrm 1.0g
Sugarcrm Sugarcrm 1.1f
Sugarcrm Sugarcrm 1.5d
Sugarcrm Sugarcrm 5.2g
1 EDB exploit
4.3
CVSSv2
CVE-2010-0465
Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x prior to 5.2.0l and 5.5.x prior to 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.
Sugarcrm Sugarcrm 5.2c
Sugarcrm Sugarcrm 5.2d
Sugarcrm Sugarcrm 5.2.0g
Sugarcrm Sugarcrm 5.2a
Sugarcrm Sugarcrm 5.5
Sugarcrm Sugarcrm 5.5.0
Sugarcrm Sugarcrm 5.2g
Sugarcrm Sugarcrm 5.2h
Sugarcrm Sugarcrm 5.2e
Sugarcrm Sugarcrm 5.2f
7.5
CVSSv2
CVE-2009-2978
SQL injection vulnerability in SugarCRM 4.5.1o and previous versions, 5.0.0k and previous versions, and 5.2.0g and previous versions, allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Sugarcrm Sugarcrm 1.0
Sugarcrm Sugarcrm 1.0f
Sugarcrm Sugarcrm 1.1e
Sugarcrm Sugarcrm 1.1f
Sugarcrm Sugarcrm 3.5.1
Sugarcrm Sugarcrm 4.0
Sugarcrm Sugarcrm
Sugarcrm Sugarcrm 5.2a
Sugarcrm Sugarcrm 5.2f
Sugarcrm Sugarcrm 1.1c
Sugarcrm Sugarcrm 1.1d
Sugarcrm Sugarcrm 3.0.1
Sugarcrm Sugarcrm 3.5
Sugarcrm Sugarcrm 4.5.0f
Sugarcrm Sugarcrm 4.5.1
Sugarcrm Sugarcrm 5.2d
Sugarcrm Sugarcrm 5.2c
Sugarcrm Sugarcrm 1.0g
Sugarcrm Sugarcrm 1.1
Sugarcrm Sugarcrm 1.5d
Sugarcrm Sugarcrm 2.0.1
Sugarcrm Sugarcrm 4.0.1
6
CVSSv2
CVE-2009-2146
Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) prior to 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the ...
Sugarcrm Sugarcrm 5.0.0h
Sugarcrm Sugarcrm 5.2d
Sugarcrm Sugarcrm 5.1.0
Sugarcrm Sugarcrm 5.1.0-beta
Sugarcrm Sugarcrm 5.1c
Sugarcrm Sugarcrm
Sugarcrm Sugarcrm 5.0.0
Sugarcrm Sugarcrm 5.0.0k
Sugarcrm Sugarcrm 5.2c
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »