CVEvulnerability

CVE-2005-4086

5.0 MEDIUM Published 2005-12-08 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-08
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.

Affected configurations

• sugarcrm sugar suite 3.5 • sugarcrm sugar suite 4.0 beta

References

http://rgod.altervista.org/sugar_suite_40beta.html rgod.altervista.org
http://secunia.com/advisories/17948 secunia.com
http://securitytracker.com/id?1015322 securitytracker.com
http://www.securityfocus.com/archive/1/418840 Exploit
http://www.securityfocus.com/bid/15760 Exploit
http://www.vupen.com/english/advisories/2005/2800 www.vupen.com
http://rgod.altervista.org/sugar_suite_40beta.html rgod.altervista.org
http://secunia.com/advisories/17948 secunia.com
http://securitytracker.com/id?1015322 securitytracker.com
http://www.securityfocus.com/archive/1/418840 Exploit
http://www.securityfocus.com/bid/15760 Exploit
http://www.vupen.com/english/advisories/2005/2800 www.vupen.com