CVE-2017-14509

概要

参考情報

• blog.ripstech.com/2017/sugarcrm-security-diet-multiple-vulnerabilities · Exploit
• support.sugarcrm.com/Resources/Security/sugarcrm-sa-2017-007 · Vendor Advisory
• synology.com/support/security/Synology_SA_17_53_SugarCRM

sugarcrm のその他の脆弱性

• CVE-2023-46816高 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been id…
• CVE-2023-46815高 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has been identified in …
• CVE-2023-35811高 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the R…
• CVE-2023-35810高 7.2An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has b…
• CVE-2023-35809高 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified i…