CVE-2018-17784

EPSS 4.4%

Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/45594/unverified exploitdbwww.exploit-db.com/exploits/45594unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://twitter.com/purplemet/status/1043979681186369537 https://www.exploit-db.com/exploits/45594/https://www.purplemet.com/blog/sugarcrm-multiple-xss-vulnerabilities