702 matches found
SugarCRM Community Edition 6.5.2 (Build 8410) - Multiple Vulnerabilities
SugarCRM Community Edition 6.5.2 Build 8410 - Multiple Vulnerabilities SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may...
SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities
Exploit for php platform in category web applications SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacke...
SugarCRM Community Edition 6.5.2 (Build 8410) - Multiple Vulnerabilities
SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control of the software. Version: 6.5.2 Buil...
SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities
SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/55347/info SugarCRM Community Edition is prone to multiple information-disclosure vulnerabilities because it fails to restrict access to certain application data. Attackers can...
SugarCRM Community Edition - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/55347/info SugarCRM Community Edition is prone to multiple information-disclosure vulnerabilities because it fails to restrict access to certain application data. Attackers can exploit these issues to obtain sensitive information that may lead to further...
SugarCRM 6.3.1 RCE
Remote command execution vulnerability in SugarCRM Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
SugarCRM CE <= 6.3.1 "unserialize()" PHP代码执行漏洞
CVECAN ID: CVE-2012-0694 SugarCRM是开源的客户关系管理系统。 SugarCRM 6.4.0在"unserialize"的实现上存在安全漏洞，通过"SugarTheme"类的"destruct"方法的$REQUEST'currentquerybypage'输入变量传递临时序列化对象可导致执行任意PHP代码。 0 SugarCRM Community Edition = 6.3.1 厂商补丁： SugarCRM -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sugarcrm.net/home/ ?p...
[CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
------------------------------------------------------- SugarCRM CE = 6.3.1 "unserialize" PHP Code Execution ------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............: n0b0d13satgmaildotcom software link....: http://www.sugarcrm.com/ -...
SugarCRM 6.3.1 unserialize() PHP Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'SugarCRM %q This module exploits a ph...
SugarCRM <= 6.3.1 unserialize() PHP Code Execution metasploit
Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'SugarCRM %q This module exploits a ph...
SugarCRM CE 6.3.1 PHP Code Execution
populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST = unserializebase64decode$tempreq'currentquerybypage';...
SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
No description provided by source. ?php / ------------------------------------------------------- SugarCRM CE = 6.3.1 "unserialize" PHP Code Execution ------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............: n0b0d13satgmaildotcom softwar...
SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
Exploit for php platform in category web applications populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST =...
SugarCRM unserialize() PHP Code Execution
This module exploits a php unserialize vulnerability in SugarCRM use exploit/unix/webapp/sugarcrm/unserializeexec msf undefinedunserializeexec show actions ...actions... msf undefinedunserializeexec set ACTION msf undefinedunserializeexec show options ...show and set options... msf...
SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution
populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST = unserializebase64decode$tempreq'currentquerybypage';...
SugarCRM CE 6.3.1 - Unserialize() PHP Code Execution
SugarCRM CE 6.3.1 - Unserialize PHP Code Execution populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST =...
CVE-2011-4833
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the 1 where and 2 order parameters in a getfulllist action to index.php...
Sql injection
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the 1 where and 2 order parameters in a getfulllist action to index.php...
CVE-2011-4833
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the 1 where and 2 order parameters in a getfulllist action to index.php...