Description

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory.

Remediation

References

CVE-2008-2045

Related Vulnerabilities

MySQL CVE-2023-22068 Vulnerability (CVE-2023-22068)

YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3785)

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Unspecified Vulnerability (2.4.9)

Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-34117)

phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-1432)

Severity

Medium

Classification

CVE-2008-2045 CWE-22

Tags

Missing Update Known Vulnerabilities