HTDark | Underground Hacking Forum and Cybersecurity Community
  • Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

sugarcrm

  1. 1

    Exploits SugarCRM 9.0.1 Phar Deserialization

    SugarCRM versions 9.0.1 and below suffer from multiple phar deserialization vulnerabilities. View the full article
  2. 1

    Exploits SugarCRM 9.0.1 PHP Object Injection

    SugarCRM versions 9.0.1 and below suffer from multiple php object injection vulnerabilities. View the full article
  3. 1

    Exploits SugarCRM 9.0.1 PHP Code Injection

    SugarCRM versions 9.0.1 and below suffer from multiple PHP code injection vulnerabilities. View the full article
  4. 1

    Exploits SugarCRM 9.0.1 Path Traversal

    SugarCRM versions 9.0.1 and below suffer from multiple path traversal vulnerabilities. View the full article
  5. 1

    Exploits SugarCRM 9.0.1 Broken Access Controls

    SugarCRM versions 9.0.1 and below suffer from multiple broken access control vulnerabilities. View the full article
  6. 1

    Exploits SugarCRM 9.0.1 SQL Injection

    SugarCRM versions 9.0.1 and below suffer from multiple remote SQL injection vulnerabilities. View the full article
  7. 1

    Exploits SugarCRM 9.0.1 Cross Site Scripting

    SugarCRM versions 9.0.1 and below suffer from multiple reflective cross site scripting vulnerabilities. View the full article
  8. 1

    Exploits SugarCRM Web Logic Hooks Module Path Traversal

    SugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a path traversal vulnerability. User input passed through the "webhook_target_module" parameter is not properly sanitized before being used to save PHP code into the hooks file through the Web Logic Hooks module. This can be...
  9. 1

    Exploits SugarCRM Web Logic Hooks Module PHP Code Injection

    SugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a PHP code injection vulnerability. User input passed through the "trigger_event" parameter is not properly sanitized before being used to save PHP code into the 'logic_hooks.php' file through the Web Logic Hooks module. This can...
  10. 1

    Exploits SugarCRM addLabels PHP Code Injection

    SugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a PHP code injection vulnerability. User input passed through key values of the 'labels_' parameters is not properly sanitized before being used to save PHP code within the "ParserLabel::addLabels()" method when saving labels...
  11. 1

    Exploits SugarCRM WorkFlow PHP Code Injection

    SugarCRM versions prior to 7.9.4.0 and 7.11.0.0 suffer from a PHP code injection vulnerability in the WorkFlow module. User input passed through the $_POST['base_module'] parameter to the "Save" action of the WorkFlow module is not properly sanitized before being used to write data into the...
  12. 1

    Exploits SugarCRM SaveDropDown PHP Code Injection

    SugarCRM versions prior to 7.9.5.0, 8.0.2, and 8.2.0 suffer from a PHP code injection vulnerability. User input passed through key values of the 'list_value' JSON parameter is not properly sanitized before being used to save PHP code when adding/saving dropdowns through the Module Builder. This...
  13. 1

    Exploits SugarCRM portal_get_related_notes SQL Injection

    SugarCRM versions prior to 7.9.4.0 and 7.11.0.0 suffer from a remote SQL injection vulnerability. The vulnerability is located within the SOAP API, specifically into the "portal_get_related_notes()" SOAP function. User input passed through the "order_by" parameter is not properly sanitized...
  14. 1

    Exploits SugarCRM ConnectorsController Server-Side Request Forgery

    SugarCRM versions prior to 7.9.4.0 and 7.11.0.0 suffer from a server-side request forgery vulnerability. The vulnerability is located within the "ConnectorsController::action_CallRest()" method. User input passed through the "url" request parameter is not properly sanitized before being used in...
  15. 1

    Exploits SugarCRM 6.5.26 Cross Site Scripting

    SugarCRM version 6.5.26 suffers from a cross site scripting vulnerability. View the full article

sugarcrm

sugarcrm

Share this tag

Back
Top