Test ID:	1.3.6.1.4.1.25623.1.0.106124
Category:	Web application abuses
Title:	SugarCRM PHP Object Injection Vulnerability
Summary:	SugarCRM is prone to a PHP injection vulnerability.
Description:	Summary: SugarCRM is prone to a PHP injection vulnerability. Vulnerability Insight: User input passed through the 'rest_data' request parameter is not properly sanitized before being used in a call to the 'unserialize()' function. This can be exploited to inject arbitrary PHP objects into the application scope, and could allow unauthenticated attackers to execute arbitrary PHP code via specially crafted serialized objects. Affected Software/OS: Version 6.5, 6.7, 7.5, 7.6 and 7.0 Solution: Update to the latest version. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.