corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08793-d899-712e-aa9b-a2e491e89985

Tales of SugarCRM Security Horrors

karmainsecurity.com · published 23 April 2017

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at karmainsecurity.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
67
Words captured
6,098

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://en.wikipedia.org/wiki/Customer_relationship_management
en.wikipedia.org
https://sourceforge.net/blog/potm-2004-10/
sourceforge.net
http://www.businesswire.com/news/home/20131112005139/en/SugarCRM-Reports-80-Growth-Profitability
businesswire.com
https://community.sugarcrm.com/thread/18434
community.sugarcrm.com
https://www.sugarcrm.com/about
sugarcrm.com
https://en.wikipedia.org/wiki/Software_as_a_service
en.wikipedia.org
http://www.ibm.com/press/us/en/pressrelease/49933.wss
ibm.com
https://www.exploit-db.com/exploits/19381/
exploit-db.com
https://en.wikipedia.org/wiki/Virtual_internship
en.wikipedia.org
https://en.wikipedia.org/wiki/Software_development_process
en.wikipedia.org
https://www.owasp.org/index.php/PHP_Object_Injection
owasp.org
https://bugs.php.net/bug.php?id=67492
bugs.php.net
http://cwe.mitre.org/data/definitions/918.html
cwe.mitre.org
https://en.wikipedia.org/wiki/XML_external_entity_attack
en.wikipedia.org
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-1643
cve.mitre.org
https://en.wikipedia.org/wiki/File_inclusion_vulnerability
en.wikipedia.org
SugarCRM Read at the source ↗
karmainsecurity.com
SugarCRM Read at the source ↗
karmainsecurity.com
SugarCRM Read at the source ↗
karmainsecurity.com
SugarCRM Read at the source ↗
karmainsecurity.com
SugarCRM Read at the source ↗
karmainsecurity.com
https://www.sugarcrm.com/security/sugarcrm-sa-2016-001
sugarcrm.com
https://twitter.com/benhayak/status/731840654838509569
twitter.com
https://twitter.com/BenHayak/status/732481643672260612
twitter.com
https://www.sugarcrm.com/security/sugarcrm-sa-2016-008
sugarcrm.com
https://bugs.php.net/bug.php?id=72663
bugs.php.net
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2016-7124
cve.mitre.org
http://php-security.org/MOPB/MOPB-05-2007.html
php-security.org
http://php-security.org/MOPB/MOPB-04-2007.html
php-security.org
https://bugs.php.net/bug.php?id=45155
bugs.php.net
https://www.sugarcrm.com/security/sugarcrm-sa-2016-007
sugarcrm.com
https://en.wikipedia.org/wiki/SQL_injection
en.wikipedia.org
https://en.wikipedia.org/wiki/Zero-day_(computing
en.wikipedia.org
https://community.sugarcrm.com/community/releases/blog/2017/03/02/version-6525-has-been-released
community.sugarcrm.com
http://info.sugarcrm.com/trial
info.sugarcrm.com
https://suitecrm.com/
suitecrm.com
https://suitecrm.com/wiki/index.php/Release_notes_7.6.7
suitecrm.com
https://suitecrm.com/wiki/index.php/Release_notes_7.6.8
suitecrm.com
https://suitecrm.com/wiki/index.php/Release_notes_7.6.9
suitecrm.com
https://suitecrm.com/wiki/index.php/Release_notes_7.5.4
suitecrm.com
https://suitecrm.com/wiki/index.php/Release_notes_7.6.5
suitecrm.com
http://www.sugarcrm.com
sugarcrm.com
http://support.sugarcrm.com/
support.sugarcrm.com
https://en.wikipedia.org/wiki/Cross-site_scripting
en.wikipedia.org
https://portswigger.net/burp/
portswigger.net
http://blog.h3xstream.com/2014/02/hql-for-pentesters.html
blog.h3xstream.com
https://en.wikipedia.org/wiki/Personally_identifiable_information
en.wikipedia.org
https://censys.io/ipv4/70.42.242.50
censys.io
https://censys.io/ipv4/70.42.242.54
censys.io
https://www.owasp.org/index.php/HttpOnly
owasp.org
http://beefproject.com/
beefproject.com
https://en.wikipedia.org/wiki/Universally_unique_identifier
en.wikipedia.org
https://github.com/sugarcrm/sugarcrm_dev/blob/03a6500177714064f43a5bec48d52c6220002712/include/utils.php
github.com
http://support.sugarcrm.com/Knowledge_Base/Customers/Working_With_Sugar_Support/
support.sugarcrm.com
https://www.theregister.co.uk/2016/11/23/wordpress_auto_update_flaw/
theregister.co.uk
https://en.wikipedia.org/wiki/Domino_effect
en.wikipedia.org
https://www.rapid7.com/db/modules/exploit/unix/webapp/sugarcrm_rest_unserialize_exec
rapid7.com
http://seclists.org/fulldisclosure/2017/Jan/55
seclists.org
https://sourceforge.net/projects/nusoap/
sourceforge.net
https://en.wikipedia.org/wiki/DNS_spoofing
en.wikipedia.org
https://en.wikipedia.org/wiki/Capture_the_flag
en.wikipedia.org
http://finance.yahoo.com/news/hitcon-2016-discovers-three-real-055336306.html
finance.yahoo.com
http://www.theinquirer.net/inquirer/news/3005958/apple-taps-sugarcrm-for-internal-customer-relationship-management-system
theinquirer.net
http://www.sugarcrm.com/security/sugarcrm-sa-2016-001
sugarcrm.com
https://3v4l.org/oc2cY
3v4l.org
https://3v4l.org/QqeAD
3v4l.org
https://updates.sugarcrm.com/heartbeat/soap.php
updates.sugarcrm.com