CVE-2005-4086

2005-12-0811:03:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

High

EPSS

0.01

Percentile

83.4%

JSON

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via “…” sequences in the beanFiles array parameter.

Affected configurations

Nvd

Node

sugarcrmsugar_suiteMatch3.5

sugarcrmsugar_suiteMatch4.0_beta

VendorProductVersionCPE
sugarcrmsugar_suite3.5cpe:2.3:a:sugarcrm:sugar_suite:3.5:*:*:*:*:*:*:*
sugarcrmsugar_suite4.0_betacpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sugarcrm	sugar_suite	3.5	cpe:2.3:a:sugarcrm:sugar_suite:3.5:::::::*
sugarcrm	sugar_suite	4.0_beta	cpe:2.3:a:sugarcrm:sugar_suite:4.0_beta:::::::*