EDB-1785

functional

Sugar Suite Open Source 4.2 - 'OptimisticLock' Command Execution

view exploit source exploit_dbverifiedtype webappsauthor rgodpublished 2006-05-14catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-2460USmedium6.4Exploit
Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS and $_SESSION from modification, which a…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan