Here is a sql dump of the official Sugar Exchange website, I tried to contact the team regarding the security vulnerabilities on their sites, I asked Blake and SugarCM, the team doesn't want to talk to me, it proves the seriousness:
http://sugarexchange.io/backup.sqlInformation from customers etc. and passwords from admins (encrypted of course)....
Their server is full of vulnerabilities....