CVE-2018-17784

Description

References

• twitter.com/purplemet/status/1043979681186369537 · Third Party Advisory
• exploit-db.com/exploits/45594 · Exploit
• purplemet.com/blog/sugarcrm-multiple-xss-vulnerabilities

sugarcrm의 다른 취약점

• CVE-2023-46816높음 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been id…
• CVE-2023-46815높음 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has been identified in …
• CVE-2023-35811높음 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the R…
• CVE-2023-35810높음 7.2An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has b…
• CVE-2023-35809높음 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified i…