Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SugarCRM SugarSales 多处 目录遍历漏洞
Vulnerability Description
SugarCRM是一套基于Web的客户关系管理系统。 Sugar Sales 2.0.1c及之前版本中存在目录遍历漏洞。 远程攻击者可利用到index.php的module，action，theme参数，或login.php的theme参数，以及其他可能同样存在漏洞参数或脚，通过使用'..'序列，读取任意文件并可能执行任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A