CVE-2005-4086

no score yetEPSS 7.3%

sugarcrm sugar suite: no CVSS score yet. EPSS 7.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.

EPSS: 7.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2005-12-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sugarcrm:sugar_suite

References

http://rgod.altervista.org/sugar_suite_40beta.html
http://secunia.com/advisories/17948
http://securitytracker.com/id?1015322
http://www.securityfocus.com/archive/1/418840
http://www.securityfocus.com/bid/15760

Check your stack JSON