CVE-2005-4087 in Sugar Suite

Summary

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 12/08/2005
• Disclosure: 12/08/2005
• Moderation: VulDB entry created
• Entries: 1: VDB-27372
• CPE: ready
• CWE: CWE-73 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.03602
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-4087
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-4087
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-4087/