701 matches found
Sugarcrm SugarCRM 跨站脚本漏洞
SugarCRM is a set of open source customer relationship management software . A cross-site scripting vulnerability exists in the Create Employee module of SugarCRM version 6.5.18. The vulnerability can be exploited to execute arbitrary web script or HTML via the "First Name" or "Last Name" input...
SugarCRM v6.5.18 - Contacts Persistent XSS Vulnerability
Document Title: =============== SugarCRM v6.5.18 - Contacts Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2249 Release Date: ============= 2020-11-16 Vulnerability Laboratory ID VL-ID: ====================================...
SugarCRM 6.5.18 Cross Site Scripting
Document Title: =============== SugarCRM v6.5.18 - Contacts Persistent Cross Site Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2249 Release Date: ============= 2020-11-16 Vulnerability Laboratory ID VL-ID:...
SugarCRM 6.5.18 Cross Site Scripting
Document Title: =============== SugarCRM v6.5.18 - Employees Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2257 Release Date: ============= 2020-11-13 Vulnerability Laboratory ID VL-ID:...
SugarCRM v6.5.18 - Employee Persistent XSS Vulnerability
Document Title: =============== SugarCRM v6.5.18 - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2257 Release Date: ============= 2020-11-13 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2020-7472
An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. This...
CVE-2020-7472
An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. This...
CVE-2020-7472
An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. This...
Authorization
An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. This...
CVE-2020-7472
This entry documents an unauthenticated remote code execution in SugarCRM via an authorization bypass and PHP local-file-include in the installation component. Affected versions include SugarCRM prior to 8.0, with 8.0 prior to 8.0.7, 9.0 prior to 9.0.4, and 10.0 prior to 10.0.0. The vulnerability...
CVE-2020-7472
An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenticated remote code execution against a configured SugarCRM instance via crafted HTTP requests. This...
SugarCRM Cross-Site Scripting Vulnerability (CNVD-2020-46296)
SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A cross-site...
SugarCRM SQL Injection Vulnerability (CNVD-2020-46297)
SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A SQL injection...
CVE-2020-17372
SugarCRM before 10.1.0 Q3 2020 allows XSS...
CVE-2020-17373
SugarCRM before 10.1.0 Q3 2020 allows SQL Injection...
CVE-2020-17372
SugarCRM before 10.1.0 Q3 2020 allows XSS...
CVE-2020-17373
SugarCRM before 10.1.0 Q3 2020 allows SQL Injection...
Sql injection
SugarCRM before 10.1.0 Q3 2020 allows SQL Injection...