CVE-2005-4087: SugarCRM Sugar Suite

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.

Affected products

• SugarCRM Sugar Suite: version 3.5 only; version 4.0_beta only

Published 2005-12-08. Last modified 2026-06-16.