SugarSuite Open Source <= 4.0beta Remote code execution

SugarSuite Open Source = 4.0beta Remote code execution software: site: http://www.sugarcrm.com/crm/ i vulnerable code in acceptDecline.php at lines 81-82 ... $bean = $beanList$REQUEST'module'; requireonce$beanFiles$bean; ... if registerglobals on & allowurlfopen on in php.ini, remote code...

SugarSuite Open Source 4.0beta - Remote Code Execution (1)

SugarSuite Open Source 4.0beta - Remote Code Execution 1 Sugar Suite Open Source body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: FFFFFF !important input background-color: 303030 !important option...

SugarSuite Open Source 4.0beta - Remote Code Execution (1)

Sugar Suite Open Source body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: FFFFFF !important input background-color: 303030 !important option background-color: 303030 !important textarea...