EUVD-2018-18069

Malware in sbrugna...

CVE-2018-6308

Summary of CVE-2018-6308 : Multiple SQL injections affect SugarCRM Community Edition 6.5.26 and earlier. The injections occur via user-supplied input in the following parameters and locations: track (modules/Campaigns/Tracker.php and modules/Campaigns/utils.php); default_currency_name (modules/Co...

SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities

SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/55347/info SugarCRM Community Edition is prone to multiple information-disclosure vulnerabilities because it fails to restrict access to certain application data. Attackers can...

SugarCRM Community Edition 5.5.2 Cross Site Request Forgery

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

CVE-2008-2045

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory...

SugarCRM Community Edition 4.5.1/5.0.0 - File Disclosure

Name SugarCRM – Local File Disclosure SugarCRM http://www.sugarcrm.com/docs/ReleaseNotes/OpenSourceReleaseNotes4.5.1j/ Advisories SugarReleaseNotes4.5.1j.2.6.html Bug 20522 http://dl.sugarforge.org/sugarcrm/SugarCE5.0Latest/SugarCE5.0.0/ SugarCommunityEditionReleaseNotes5.0c.pdf Bug 20342 Date...