Home / vulnerabilities SugarCRM 6.5.16 XXE Injection
Posted on 19 June 2014
Source : packetstormsecurity.org Link
Product:SugarCRM
Description:SugarCRM enables businesses to create extraordinary customer relationships with the most innovative and affordable CRM solution in the market.
Version affected:v6.5.16 and less
Type:XML External Entity Attack
Consequence:Arbitrary Local File Read&Potential RCE
Vulnerability Details:http://www.pnigos.com/?p=294Fix Released:This bug has fixed in v6.5.17
Bug was found by pnig0s @ FreeBuf.Com
==================================================
Best Regards,pnig0s
