all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
all InfoSec news

SugarCRM 13.0.1 Server-Side Template Injection

Add to bookmarks
Oct. 27, 2023, 1:04 p.m. |

Packet Storm packetstormsecurity.com

SugarCRM versions 13.0.1 and below suffer from a server-side template injection vulnerability in the GetControl action from the Import module. This issue can be leveraged to execute arbitrary php code.

action code import injection issue php server sugarcrm template template injection vulnerability

Visit resource

More from packetstormsecurity.com / Packet Storm

Wireshark Analyzer 4.2.5 5 days, 5 hours ago | packetstormsecurity.com
capture code commercial features +14
Packet Fence 13.2.0 5 days, 5 hours ago | packetstormsecurity.com
abnormal access access control a network +21
SIPPTS 4.0 5 days, 5 hours ago | packetstormsecurity.com
audit check devices protocol +13
Debian Security Advisory 5692-1 5 days, 6 hours ago | packetstormsecurity.com
advisory arbitrary code code debian +18
Debian Security Advisory 5691-1 5 days, 6 hours ago | packetstormsecurity.com
advisory arbitrary code browser clickjacking +16
Debian Security Advisory 5689-1 5 days, 6 hours ago | packetstormsecurity.com
advisory arbitrary code aware chromium +19
Debian Security Advisory 5690-1 5 days, 6 hours ago | packetstormsecurity.com
advisory click debian debian linux security +11
Ubuntu Security Notice USN-6766-2 5 days, 6 hours ago | packetstormsecurity.com
action attacker conditions denial of service +16
Red Hat Security Advisory 2024-2852-03 5 days, 6 hours ago | packetstormsecurity.com
advisory apache build developer +13

Jobs in InfoSec / Cybersecurity

Post a Job Search Talent

Sr. Product Manager

@ MixMode | Remote, US
View on infosec-jobs.com

Information Security Engineers

@ D. E. Shaw Research | New York City
View on infosec-jobs.com

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada
View on infosec-jobs.com

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA
View on infosec-jobs.com

PNT/NAVWAR Space Electronic Warfare Instructor II – Officer Training Course

@ Aleut Federal | Colorado Springs, Colorado, United States
View on infosec-jobs.com

Sr Director, Cybersecurity SIRT

@ Workday | USA, VA, McLean
View on infosec-jobs.com