CVE-2023-46815

creationtimestamp| type| source ---|---|--- 2023-10-27 12:27:06+00:00| seen| Telegram/LdfXs4V87LgXb6XDJ0UJHcge2u0-25N3d1LLgeXf5CI0w 2024-06-03 13:26:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10613...

CVE-2023-46815

An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has been identified in the Notes module. By using a crafted request, custom PHP code can be injected via the Notes module because of missing input validation. An attacker with...

CVE-2023-46815

SugarCRM CVE-2023-46815 affects SugarCRM 12 before 12.0.4 and 13 before 13.0.2. The issue is an Unrestricted File Upload in the Notes module caused by missing input validation, enabling an attacker with regular user privileges to inject PHP code via a crafted request. This results in a high-sever...