701 matches found
SugarCRM 6.5.18 - PHP Code Injection
SugarCRM 6.5.18 - PHP Code Injection --------------------------------------------------------- SugarCRM $val 104. $str.= overridevaluetostringrecursive2$newArrayName, $key, $val, $saveempty; 105. 106. return $str; 107. else 108. if!$saveempty && empty$value 109. return; 110. else 111. return...
SugarCRM 6.5.18 fopen() Command Injection / XSS / SSRF
----------------------------------------------------------------------------- SugarCRM generateTitle; User input passed through the "typemodule" request parameter isn’t properly sanitized before being used to instantiate a new DashletRssFeedTitle object, and this could be exploited to carry out...
SugarCRM 6.5.18 PHP Code Injection
--------------------------------------------------------- SugarCRM $val 104. $str.= overridevaluetostringrecursive2$newArrayName, $key, $val, $saveempty; 105. 106. return $str; 107. else 108. if!$saveempty && empty$value 109. return; 110. else 111. return "$$arrayname" . "'$valuename' = "...
SugarCRM 6.5.18 Missing Authorization
-------------------------------------------------------------- SugarCRM = 6.5.18 Missing Authorization Check Vulnerabilities -------------------------------------------------------------- - Software Link: http://www.sugarcrm.com/ - Affected Versions: Version 6.5.18 CE and prior versions. -...
SugarCRM REST Unserialize PHP Code Execution
This module exploits a PHP Object Injection vulnerability in SugarCRM CE use exploit/unix/webapp/sugarcrm/restunserializeexec msf undefinedrestunserializeexec show actions ...actions... msf undefinedrestunserializeexec set ACTION msf undefinedrestunserializeexec show options ...show and set...
community.sugarcrm.com XSS vulnerability
Vulnerable URL: https://community.sugarcrm.com/tags?tags=%22%3E%3C/option%3E%3C%20/select%3E%3Cbody/onpageshow=prompt%28%29%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
community.sugarcrm.com XSS vulnerability
Vulnerable URL: https://community.sugarcrm.com/external-link.jspa?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...
PHP process_nested_data 函数释放后重用漏洞
A while ago the function "processnesteddata" was changed to better handle object properties. Before it was possible to create numeric object properties which would cause trouble down the road. So the following code was added: if !objprops ... else / object properties should include no integers /...
SugarCRM SuiteCRM 'Upload Company Logo' Arbitrary File Upload Vulnerability
SugarCRM is an open source customer relationship management CRM system from SugarCRM, Inc. in the United States. The system supports differentiated marketing for different customer needs, managing and distributing sales leads, and enabling information sharing and tracking of sales reps.SuiteCRM i...
SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
No description provided by source. ?php / ------------------------------------------------------- SugarCRM CE = 6.3.1 unserialize PHP Code Execution ------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............: n0b0d13satgmaildotcom software...
SugarCRM <= 6.3.1 unserialize() PHP Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
sugar crm 5.5.0.rc2 and 5.2.0j Multiple Vulnerabilities
No description provided by source. Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection vulnerabilities 2. Multiple...
SugarCRM 1.x/2.0 Module Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/11740/info SugarCRM is reported prone to multiple vulnerabilites arising from insufficient sanitization of user-supplied input. These issues can a remote attacker to carry out cross-site scripting, HTML injection, SQL...
SugarCRM 1.x/2.0 Module record Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/11740/info SugarCRM is reported prone to multiple vulnerabilites arising from insufficient sanitization of user-supplied input. These issues can a remote attacker to carry out cross-site scripting, HTML injection, SQL...
SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities
No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...
SugarCRM v6.5.1 rss dashlet LFI via XXE Attack
No description provided by source...
SugarCRM unserialize() PHP Code Execution
A remote code execution vulnerability has been reported in SugarCRM servers 6.3.1 and below. The vulnerability is due to an error while parsing the user data to currentquerybypage parameter. Remote authenticated attacker can exploit this vulnerability by sending malicious command to the affected...
DOMIT! RSS testing_domitrss.php discloses local files
Overview A vulnerability in DOMIT! RSS allows an attacker to read local files. Description DOMIT! RSS is an RSS parser for PHP. DOMIT! RSS includes a test script called testingdomitrss.php. This script writes out the contents of any user-supplied URL to a local file named the MD5 hash of the URL...
Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities
Title: ====== Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=700 VL-ID: ===== 700 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: =============...
SugarCRM Community Edition 6.5.2 (Build 8410) - Multiple Vulnerabilities
SugarCRM Community Edition 6.5.2 Build 8410 - Multiple Vulnerabilities SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may...