CVE-2012-0694

Name of the Vulnerable Software and Affected Versions SugarCRM CE versions 6.3.1 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code due to the use of unserialize() with user-controlled input in certain scripts.

Recommendations For SugarCRM CE versions 6.3.1 and earlier, as a temporary workaround, consider restricting access to the affected scripts that utilize unserialize() with user-controlled input until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.