Description
SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter.
Remediation
References
Related Vulnerabilities
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6610)
WordPress Plugin Slideshow Gallery LITE Arbitrary File Upload (1.4.6)
Joomla! Core 3.x.x Cross-Site Scripting (3.2.0 - 3.9.3)
Python URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2016-1000110)
WordPress Plugin WordPress Automatic 'q' Parameter SQL Injection (2.0.3)