SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  SugarCRM Arbitrary File Upload

Category: WEB-ATTACKS      

In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.


Relevant Information