admin/0day
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

*

Browse Source
This commit is contained in:
Mr5m1th 2017-09-25 21:31:10 +08:00
parent 410f713b49
commit d518bf08a4
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
CMS/sugarCRM/sugarCRM_v6.5.23/README.md
View File

@ -1,3 +1,6 @@
sugarCRM v6.5.23 反序列化漏洞(对象注入漏洞)绕过__wakeup 影响版本 SugarCRM <= 6.5.23 PHP5 < 5.6.25 PHP7 < 7.0.10
sugarCRM反序列化漏洞(对象注入漏洞)绕过__wakeup
修复建议:include/utils.php sugar_unserialize函数正则匹配修正为 /[oc]:[^:]*\d+:/i
影响版本 SugarCRM <= 6.5.23 PHP5 < 5.6.25 PHP7 < 7.0.10
修复建议：
include/utils.php sugar_unserialize函数正则匹配修正为 /[oc]:[^:]*\d+:/i