Lucene search
HistoryDec 08, 2005 - 11:03 a.m.
CVE-2005-4087
php
remote file include vulnerability
sugarcrm
security
nvd
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.3%
PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.
Affected configurations
Node
sugarcrmsugar_suiteMatch3.5
ORsugarcrmsugar_suiteMatch4.0_beta
| CPE | Name | Operator | Version |
|---|---|---|---|
| sugarcrm:sugar_suite | sugarcrm sugar suite | eq | 3.5 |
| sugarcrm:sugar_suite | sugarcrm sugar suite | eq | 4.0_beta |
Related
nvd
nvd
CVE-2005-4087
2005-12-08 11:03:00
cvelist
cvelist
CVE-2005-4087
2005-12-08 11:00:00
openvas
openvas
SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability
2006-03-26 00:00:00
SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability
2006-03-26 00:00:00
nessus
nessus
SugarCRM <= 4.0 beta acceptDecline.php Remote File Inclusion
2005-12-10 00:00:00
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.3%
Related for CVE-2005-4087