CVEs-PoC/2018/CVE-2018-17784.md

CVE-2018-17784

Description

Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.

POC

Reference

• https://www.exploit-db.com/exploits/45594/
• https://www.purplemet.com/blog/sugarcrm-multiple-xss-vulnerabilities

Github

• https://github.com/ARPSyndicate/cvemon