CVE-2009-2398

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// dot dot slash slash in the t parameter...

CVE-2009-2398

CVE-2009-2398 : Affected software is PHP-Sugar 0.80, vulnerable in test/index.php. The vulnerability is a directory traversal via the t parameter using a ..// sequence, allowing a remote attacker to read arbitrary files. Connected sources corroborate the same description (NVD/NVD mirrors). No exp...

CVE-2009-2398

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// dot dot slash slash in the t parameter...

CVE-2009-2398: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// dot dot slash slash in the t parameter...

PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability

No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files...

PHP-Sugar 0.80 (index.php t) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP-Sugar 0.80 index.php t Local File Inclusion Vulnerability =============================================================== =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=...

PHP-Sugar 0.80 - index.php?t Local File Inclusion

PHP-Sugar 0.80 - index.php?t Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files...

PHP-Sugar 0.80 Local File Inclusion

=-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= if...

PHP-Sugar 0.80 - 'index.php?t' Local File Inclusion

=-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=- script: PHP-Sugar 0.80 ----------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://php-sugar.net/files/?mod=files =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= if...

Unrestricted file upload

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

CVE-2009-2146

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

CVE-2009-2146: Undefined Security Weakness

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

CVE-2008-2045

SugarCRM Community Edition 4.5.1 and 5.0.0 are affected by an absolute path traversal in modules/Feeds/Feed.php, allowing remote attackers to read arbitrary files by supplying a full path in the URL parameter; the content is placed into a related cache file in the .cache/feeds directory. This sum...

CVE-2008-2045: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory...

CVE-2006-5082

Unspecified vulnerability in Sugar Suite Open Source SugarCRM before 4.2.1 Patch C 20060917 has unspecified impact, related to code execution, and unspecified attack vectors...

CVE-2006-5082

Technical details are not publicly available in the provided documents for CVE-2006-5082; monitor for updates.

CVE-2006-5082: Undefined Security Weakness

Unspecified vulnerability in Sugar Suite Open Source SugarCRM before 4.2.1 Patch C 20060917 has unspecified impact, related to code execution, and unspecified attack vectors...

sugarsuite.txt

!/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.sugarcrm.com/crm/ i vulnerable code in modules/OptimisticLock/LockResolve.php...

Directory traversal

Sugar Suite Open Source SugarCRM 4.2 and earlier, when registerglobals is enabled, does not protect critical variables such as $GLOBALS and $SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by...

CVE-2006-2460

Sugar Suite Open Source SugarCRM 4.2 and earlier, when registerglobals is enabled, does not protect critical variables such as $GLOBALS and $SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by...