Vulnerabilities

TI-2006-04898 CVE-2006-5082 · GHSA-4cjv-hchw-rq37

Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C…

LOW 37

Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02216 Published 2006-09-29 No fix listed

TI-2005-03875 CVE-2005-4087 · GHSA-xqrv-hxv4-28ph

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source…

LOW 39

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in th…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0373 Published 2005-12-08 No fix listed

TI-2005-03874 CVE-2005-4086 · GHSA-9vpc-3ghg-r29c

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source…

LOW 33

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequenc…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07328 Published 2005-12-08 No fix listed

Vulnerabilities

Filters

Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C…

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source…

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source…