8 matches found
EUVD-2020-23987
Malware in sbrugna...
EUVD-2020-21342
Malware in sbrugna...
EUVD-2004-1225
Malware in sbrugna...
EUVD-2017-6009
Malware in sbrugna...
CVE-2024-58258
SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur...
Vulnerabilities fixed in SugarCRM
Vulnerabilities have been fixed in SugarCRM. A malicious party could exploit the vulnerabilities to launch cross-site scripting or SQL injection attacks, manipulate data or execute code execute code. No CVE IDs have yet been disclosed for the vulnerabilities. SugarCRM has released updates to fix...
Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM
---------------------------------------------------------------------------- Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM ---------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basqu...
SugarCRM 1.x/2.0 Module - Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/11740/info SugarCRM is reported prone to multiple vulnerabilites arising from insufficient sanitization of user-supplied input. These issues can a remote attacker to carry out cross-site scripting, HTML injection, SQL injection and directory traversal...