SugarCRM EmailTemplates CVE-2023-22952 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• Elestio Memos /api/v1/markdown/link:metadata 服务器端请求伪造漏洞（CVE-2025-22952）
• SugarCRM /service/v4/rest.php 代码执行漏洞（CVE-2025-25034）
• （CVE-2025-25034）SugarCRM PHP对象注入漏洞
• PoCCVE-2018-5715: SugarCRM 3.5.1 - Cross-Site Scripting
• PoCCVE-2019-14974: SugarCRM Enterprise 9.0.0 - Cross-Site Scripting
• PoCCVE-2023-22952: SugarCRM Unauthenticated - Remote Code Execution
• PoCCVE-2025-22952: Elestio Memos <= v0.24.0 - Server-Side Request Forgery
• PoCCVE-2025-25034: SugarCRM - Unauthenticated Remote Code Execution via PHP Object Injection
• PoCsugarcrm-install: SugarCRM Exposed Installation
• ElestioMemos v0.23.0版本存在SSRF漏洞(CVE-2025-22952)
• SugarCRM index.php 任意文件上传漏洞(CVE-2023-22952)
• SugarCRM 3.5.1 XSS (CVE-2018-5715)
• SugarCRM-REST反序列化PHP代码执行