EDB-45594

PoC

SugarCRM 6.5.26 - Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Purplemet Securitypublished 2018-10-12catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-17784USmedium6.1Exploit
Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan