exploits , vulnerabilities , articles , SugarCRM/SugarSales Remote File Include Vulnerability

Title	SugarCRM/SugarSales Remote File Include Vulnerability
Published	2005-01-07-12:00AM
Updated	2005-01-07-05:46PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Santiago Cortes is credited with the discovery of this vulnerability.
Vulnerable	SugarCRM SugarSales 2.0.1 c SugarCRM SugarCRM 2.0.1 a SugarCRM SugarCRM 2.0.1 SugarCRM SugarCRM 1.5 d SugarCRM SugarCRM 1.1 f SugarCRM SugarCRM 1.1 e SugarCRM SugarCRM 1.1 d SugarCRM SugarCRM 1.1 c SugarCRM SugarCRM 1.1 b SugarCRM SugarCRM 1.1 a SugarCRM SugarCRM 1.1 SugarCRM SugarCRM 1.0 g SugarCRM SugarCRM 1.0 f SugarCRM SugarCRM 1.0
Not Vulnerable
Code	An exploit is not required. An example demonstrating this vulnerability is provided: http://www.example.com/index.php?module=Home&moduleDefaultFile[Home]=[file]
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-01-09 MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
• 2009-01-09 Check Point SecurePlatform Unspecified Remote Security Vulnerability
• 2009-01-09 Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
• 2009-01-09 NetGear WG102 SNMP Write Community String Information Disclosure Vulnerability
• 2009-01-09 Serv-U Remote Denial of Service Vulnerabilities
• 2009-01-09 QuoteBook Information Disclosure, SQL Injection and HTML Injection Vulnerabilities
• 2009-01-08 Oracle January 2009 Oracle Critical Patch Update Pre-Release Announcement Multiple Vulnerabilities
• 2009-01-08 Microsoft January 2009 Advance Notification Multiple Vulnerabilities
• 2009-01-08 IBM WebSphere DataPower XML Security Gateway XS40 Remote Denial Of Service Vulnerability
• 2009-01-08 Drupal Project Release Module Multiple Remote Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 10 Jan 2009 03:47:08 +0000