News Group
Posted By: Olavo Farias Secunia Research ((Visit Link)) reported a security issue for Module Builder 4.5.1.c (not affiliated with the Sugar Module Builder, due to be released in Sugar 5.0) when downloading the generated install file. The reason is a missing SugarCRM security command at the beginning of code. The generated modules are not affected, only the development system, with this moderately critical issue. Later versions, (named BuilderWizard) are not affected by this issue. You can correct manually, if you have ModuleBuilder installed, adding the security line just after the < ? on file DownloadModule.php The line is: if(!defined('sugarEntry') || !sugarEntry) die('Not A Valid Entry Point'); |
Latest News
| ||||||
Start New Thread
| Topic | Topic Starter | Replies | Last Post | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Terms & Conditions|Privacy Policy|Trademark Info|Contact Info|Comments & Questions
SugarCRM Inc.© 2004 - 2009 All rights reserved.
SugarCRM Inc.© 2004 - 2009 All rights reserved.
