CVE-2005-4087

Published: Dec 8, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.

Affected (2)

Products: Sugarcrm: Sugar Suite

Sugarcrm

1 product

Sugar Suite

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Sugarcrm Sugar Suite	Version 3.5
Sugarcrm Sugar Suite	Version 4.0_beta

References (8)

http://securityreason.com/securityalert/239

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/418840

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/15760

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/23541

Source: cve@mitre.org

http://securityreason.com/securityalert/239

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/418840

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/15760

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/23541

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.