SugarCRM Community Edition 4.5.15.0.0 - File Disclosure

SugarCRM Community Edition 4.5.15.0.0 - File Disclosure Name SugarCRM – Local File Disclosure SugarCRM http://www.sugarcrm.com/docs/ReleaseNotes/OpenSourceReleaseNotes4.5.1j/ Advisories SugarReleaseNotes4.5.1j.2.6.html Bug 20522 http://dl.sugarforge.org/sugarcrm/SugarCE5.0Latest/SugarCE5.0.0/...

sugarcrm-disclose.txt

======================================================================== = SugarCRM Community Edition Local File Disclosure Vulnerability = = Vendor Website: = http://www.sugarcrm.com = = Affected Version: = -- SugarCRM Community Edition 4.5.1 = -- SugarCRM Community Edition 5.0.0 = = Public...

SugarCRM Community Edition 4.5.1/5.0.0 File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== SugarCRM Community Edition 4.5.1/5.0.0 File Disclosure Vulnerability ==================================================================== Name SugarCRM – Local File...

SugarCRM Community Edition 4.5.1/5.0.0 - File Disclosure

Name SugarCRM – Local File Disclosure SugarCRM http://www.sugarcrm.com/docs/ReleaseNotes/OpenSourceReleaseNotes4.5.1j/ Advisories SugarReleaseNotes4.5.1j.2.6.html Bug 20522 http://dl.sugarforge.org/sugarcrm/SugarCE5.0Latest/SugarCE5.0.0/ SugarCommunityEditionReleaseNotes5.0c.pdf Bug 20342 Date...

[Full-disclosure] SugarCRM Community Edition Local File Disclosure Vulnerability

======================================================================== = SugarCRM Community Edition Local File Disclosure Vulnerability = = Vendor Website: = HYPERLINK "http://www.sugarcrm.com"http://www.sugarcrm.com = = Affected Version: = -- SugarCRM Community Edition 4.5.1 = -- SugarCRM...

CVE-2006-6712

Cross-site scripting XSS vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages...

CVE-2006-6712

Cross-site scripting XSS vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages...

CVE-2006-6712

Cross-site scripting XSS vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages...

CVE-2006-6712

SugarCRM Open Source versions 4.5.0f and earlier are affected by a Cross-Site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages, potentially executing in the victim’s browser and, per JVN, coul...

PT-2006-7313 · Sugarcrm · Sugarcrm Open Source

Name of the Vulnerable Software and Affected Versions: SugarCRM Open Source versions 4.5.0f and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages. Recommendations: For SugarCRM Ope...

JVN#74079537 SugarCRM cross-site scripting vulnerability

Impact An arbitrary script could be executed on the user's web browser where the user logged into SugarCRM. If an attacker obtains session information from a cookie, an attacker could possibly conduct session hijacking. Solution Products Affected SugarCRM 4.5.0f and earlier...

CVE-2006-5082

Unspecified vulnerability in Sugar Suite Open Source SugarCRM before 4.2.1 Patch C 20060917 has unspecified impact, related to code execution, and unspecified attack vectors...

JVN#30144870 SugarCRM cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected SugarCRM 4.2.1b and earlier SugarCRM 4.0.1g and earlier SugarCRM 3.5.1h and earlier...

CVE-2006-2460

SugarCRM (Sugar Suite Open Source)

SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability

The remote web server contains a PHP script that is prone to multiple flaws. Description : SugarCRM is a Customer Relationship Manager written in PHP. The version of SugarCRM installed on the remote host does not properly sanitize user input in the 'beanFiles' parameter in the 'acceptDecline.php'...

SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability

The version of SugarCRM installed on the remote host does not properly sanitize user input in the SPDX-FileCopyrightText: 2005 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-4087

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter...

CVE-2005-4087

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter...

CVE-2005-4087

SugarCRM

vTiger CRM 4.2 RSS Aggregation Module - Feed Cross-Site Scripting

vTiger CRM 4.2 RSS Aggregation Module - Feed Cross-Site Scripting source: https://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is pro...