Mar 10 2010 6:13PM GMT
Posted by: Jeromie Jackson
Uncategorized
Spear Phishing For SugarCRM Customer Lists
Posted by: Jeromie Jackson
Uncategorized
I recently found a security vulnerability in SugarCRM which affects all versions prior to 5.5.0a and 5.2.0l. The vulnerability consists of a stored cross-site scripting vulnerability within the Documents section of the application. Full documentation of the exploit can be found at:
http://jeromiejackson.com/index.php/the-news/79-Spear-Phishing-SugarCRM-CustomerLists
Comment
RSS Feed
Email a friend
