writeups.xyz / Tales of SugarCRM Security Horrors

Submitter : c2a

Date: 23 April 2017

Bounty : undisclosed

Vulnerabilities :

• PHP Object Injection
• SQL Injection
• Authentication Bypass

Programs :

• SugarCRM

Authors :

• Egidio Romano / EgiX

Link :
http://karmainsecurity.com/tales-of-sugarcrm-security-horrors