Lucene search
MitreCVE-2005-4087HistoryDec 08, 2005 - 11:03 a.m.
CVE-2005-4087
2005-12-0811:03:00
mitre
web.nvd.nist.gov
33
php
remote file include vulnerability
sugarcrm
security
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.01
Percentile
83.3%
PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.
Affected configurations
Node
sugarcrmsugar_suiteMatch3.5
ORsugarcrmsugar_suiteMatch4.0_beta
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sugarcrm | sugar_suite | 3.5 | cpe:2.3:a:sugarcrm:sugar_suite:3.5:*:*:*:*:*:*:* |
| sugarcrm | sugar_suite | 4.0_beta | cpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2005-4087
2005-12-08 11:00:00
nvd
nvd
CVE-2005-4087
2005-12-08 11:03:00
exploitdb
exploitdb
SugarSuite Open Source 4.0beta - Remote Code Execution (1)
2005-12-07 00:00:00
SugarSuite Open Source 4.0beta - Remote Code Execution (2)
2005-12-08 00:00:00
nessus
nessus
SugarCRM <= 4.0 beta acceptDecline.php Remote File Inclusion
2005-12-10 00:00:00
openvas
openvas
SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability
2006-03-26 00:00:00
SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability
2006-03-26 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.01
Percentile
83.3%
Related for CVE-2005-4087