HTTP: SugarCRM PHP Code Execution

This signature detects attempts to exploit a known vulnerability against SugarCRM. A successful attack can lead to arbitrary code execution.

Extended Description

SugarCRM Community Edition is prone to multiple remote PHP code-execution vulnerabilities. An attacker can exploit these issues to inject and execute arbitrary malicious PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system; other attacks are also possible. SugarCRM Community Edition versions 6.3.1 and prior are vulnerable.

Affected Products

Sugarcrm sugarcrm_community_edition

References

BugTraq: 54169

CVE: CVE-2012-0694

URL: http://forums.sugarcrm.com/f22/critical-security-vulnerability-76537/ http://www.sugarcrm.com/forums/f22/critical-security-vulnerability-76537/

Short Name

HTTP:PHP:SUGARCRM-CE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: SugarCRM PHP Code Execution

Extended Description

Affected Products

References

Found a potential security threat?