CVE-2005-4087 Information

Description

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.

Reference

http://securityreason.com/securityalert/239 http://www.securityfocus.com/archive/1/418840 http://www.securityfocus.com/bid/15760 https://exchange.xforce.ibmcloud.com/vulnerabilities/23541