CVE-2012-0694

CRITICAL 9.8CVE-2012-0694 · Published 29/10/2019 · updated 16/06/2026

Package	Affected versions	Patched versions
sugarcrm sugarcrm	`≤ 6.3.1`	No fix yet

Description

SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code.

References

seclists.org/bugtraq/2012/Jun/165 · Mailing List
security-tracker.debian.org/tracker/CVE-2012-0694 · Third Party Advisory
exploit-db.com/exploits/19381 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free