SugarCRM 'MySugar::addDashlet()' Function Security Bypass Vulnerability

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A security bypass...

SugarCRM 6.5.18 fopen() Command Injection / XSS / SSRF

----------------------------------------------------------------------------- SugarCRM generateTitle; User input passed through the "typemodule" request parameter isn’t properly sanitized before being used to instantiate a new DashletRssFeedTitle object, and this could be exploited to carry out...