Description

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files via a full path in the URL parameter to modules/Feeds/Feed.php, which places the contents into a related cache file in the .cache/feeds directory.

Remediation

References

CVE-2008-2045

Related Vulnerabilities

WordPress Plugin Virtue/Pinnacle ToolKit Unspecified Vulnerability (2.5)

WordPress Plugin WooCommerce Affiliate-Coupon Affiliates Cross-Site Request Forgery (4.11.3.3)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-32470)

Internet Information Services Improper Authentication Vulnerability (CVE-2009-1122)

phpBB Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-8226)

Severity

Medium

Classification

CVE-2008-2045 CWE-22

Tags

Missing Update Known Vulnerabilities