Signature Detail

HTTP: SugarCRM PHP Code Execution

This signature detects attempts to exploit a known vulnerability against SugarCRM. A successful attack can lead to arbitrary code execution.

Extended Description

SugarCRM Community Edition is prone to multiple remote PHP code-execution vulnerabilities. An attacker can exploit these issues to inject and execute arbitrary malicious PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system; other attacks are also possible. SugarCRM Community Edition versions 6.3.1 and prior are vulnerable.

Affected Products

• Sugarcrm sugarcrm_community_edition 4.5.1
• Sugarcrm sugarcrm_community_edition 4.5.1J
• Sugarcrm sugarcrm_community_edition 5.0.0
• Sugarcrm sugarcrm_community_edition 5.0.0C
• Sugarcrm sugarcrm_community_edition 6.3.0RC1
• Sugarcrm sugarcrm_community_edition 6.3.1

References

• BugTraq: 54169
• CVE: CVE-2012-0694
• URL: http://forums.sugarcrm.com/f22/critical-security-vulnerability-76537/
• URL: http://www.sugarcrm.com/forums/f22/critical-security-vulnerability-76537/