CVE-2020-17373

Description

References

• packetstormsecurity.com/files/158848/SugarCRM-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2020/Aug/9 · Exploit
• support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-051 · Release Notes

sugarcrm의 다른 취약점

• CVE-2023-46816높음 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been id…
• CVE-2023-46815높음 8.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has been identified in …
• CVE-2023-35811높음 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the R…
• CVE-2023-35810높음 7.2An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has b…
• CVE-2023-35809높음 8.8An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified i…