CVE-2005-4086
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 7.3%
from disclosure to weapon0 days
Published on NVDDec 8
1st PoCDec 7
exploitation probability
7.3%top 6% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the beanFiles array parameter.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1359exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1364⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.