CVE-2008-2045: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory...

SugarCRM Community Edition 4.5.1/5.0.0 File Disclosure Vulnerability

No description provided by source. Name SugarCRM – Local File Disclosure SugarCRM http://www.sugarcrm.com/docs/ReleaseNotes/OpenSourceReleaseNotes4.5.1j/ Advisories SugarReleaseNotes4.5.1j.2.6.html Bug 20522 http://dl.sugarforge.org/sugarcrm/SugarCE5.0Latest/SugarCE5.0.0/...

SugarCRM Community Edition RSS模块信息泄露漏洞

BUGTRAQ ID: 28981 SugarCRM是开源的客户关系管理系统。 SugarCRM没有正确地验证对RSS模块的输入便用于在cache/feeds目录中生成缓存文件，远程攻击者可能利用此漏洞在系统上创建文件。 RSS模块允许SugarCRM用户向个人RSS列表添加RSS源，但没有正确地过滤URL变量值，因此用户可以输入任意URI值。在这种情况下，SugarCRM可能无法在列表中显示新的RSS源，但应用程序会以所输入URL的md5哈希为文件名在cache/feeds目录中创建本地文件。 SugarCRM SugarCRM Community Edition 5.0 SugarC...

SugarCRM Community Edition 4.5.1/5.0.0 - File Disclosure

Name SugarCRM – Local File Disclosure SugarCRM http://www.sugarcrm.com/docs/ReleaseNotes/OpenSourceReleaseNotes4.5.1j/ Advisories SugarReleaseNotes4.5.1j.2.6.html Bug 20522 http://dl.sugarforge.org/sugarcrm/SugarCE5.0Latest/SugarCE5.0.0/ SugarCommunityEditionReleaseNotes5.0c.pdf Bug 20342 Date...

CVE-2007-2677

CVE-2007-2677 affects phpChess Community Edition 2.0 with multiple PHP remote file inclusion vectors. The affected components are (1) config parameter to includes/language.php and (2)-(4) Root_Path/Parameters to layout_admin_cfg.php, layout_cfg.php, and layout_t_top.php in skins/phpchess/. The vu...

CVE-2007-2677: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the config parameter to includes/language.php, or the RootPath parameter to 2 layoutadmincfg.php, 3 layoutcfg.php, or 4 layoutttop.php in...

phpChess Community Edition 2.0 Multiple RFI Vulnerabilities

No description provided by source. phpChess Community Edition 2.0 Multiple Remote File Inclusion Vulnerabilities D.Script: http://www.phpchess.net/index-3.html Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/phpchess/layoutadmincfg.php?RootPath=Shell...

phpChess Community Edition 2.0 Multiple RFI Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== phpChess Community Edition 2.0 Multiple RFI Vulnerabilities =========================================================== phpChess Community Edition 2.0 Multiple Remote File Inclusi...

CVE-1999-1527: Undefined Security Weakness

Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server...