漏洞描述
SugarCRM 3.5.1易受通过phprint.php和查询字符串中的参数名称（又名$key变量）进行跨站点脚本编写的攻击。
SugarCRM 3.5.1 XSS (CVE-2018-5715)
PoC代码
暂无相关漏洞推荐
- （CVE-2025-25034）SugarCRM PHP对象注入漏洞
- POC CVE-2018-5715: SugarCRM 3.5.1 - Cross-Site Scripting
- POC CVE-2019-14974: SugarCRM Enterprise 9.0.0 - Cross-Site Scripting
- POC CVE-2023-22952: SugarCRM Unauthenticated - Remote Code Execution
- POC CVE-2025-25034: SugarCRM - Unauthenticated Remote Code Execution via PHP Object Injection
- POC sugarcrm-install: SugarCRM Exposed Installation
- SugarCRM EmailTemplates CVE-2023-22952 远程代码执行漏洞
- SugarCRM index.php 任意文件上传漏洞(CVE-2023-22952)
- SugarCRM-REST反序列化PHP代码执行
- SugarCRM-REST反序列化漏洞