exploit/unix/webapp/sugarcrm_rest_unserialize_exec

weaponized

SugarCRM REST Unserialize PHP Code Execution

view exploit source metasploittype exploitpublished 2016-06-23catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-25034US	—	4.96% (92nd)	Exploit	2025-06-20
A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0 due to improper validation of PHP serialized input in the Su…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.