CVE-2021-42840

概要

参考情報

• packetstormsecurity.com/files/165001/SuiteCRM-7.11.18-Remote-Code-Execution.html · Exploit
• docs.suitecrm.com/admin/releases/7.11.x · Release Notes
• rapid7/metasploit-framework · Third Party Advisory
• suitecrm.com/time-to-upgrade-suitecrm-7-11-19-7-10-30-lts-released · Release Notes
• theyhack.me/SuiteCRM-RCE-2 · Exploit

suitecrm のその他の脆弱性

• CVE-2019-25664高 7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows …
• CVE-2019-25663高 7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL c…
• CVE-2025-64493中 6.5SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 8.6.0 through 8.9.0, t…
• CVE-2025-64492高 8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 8.9.0 and below contain a…
• CVE-2025-64491中 6.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.7 and below allow un…