CVE-2018-17784

Description

References

• twitter.com/purplemet/status/1043979681186369537 · Third Party Advisory
• exploit-db.com/exploits/45594 · Exploit
• purplemet.com/blog/sugarcrm-multiple-xss-vulnerabilities

Altre vulnerabilità di sugarcrm

• CVE-2023-46816ALTO 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been id…
• CVE-2023-46815ALTO 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has been identified in …
• CVE-2023-35811ALTO 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the R…
• CVE-2023-35810ALTO 7.2An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has b…
• CVE-2023-35809ALTO 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified i…