Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sugarcrm sugarcrm 1.1f vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2005-0266
Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote malicious users to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.
Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.1dSugarcrm Sugarcrm 1.1eSugarcrm Sugarcrm 1.1bSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 1.1Sugarcrm Sugarcrm 1.1aSugarcrm Sugarcrm 2.0.1Sugarcrm Sugarcrm 2.0.1a
10
CVSSv2
CVE-2004-1225
SQL injection vulnerability in SugarCRM Sugar Sales prior to 2.0.1a allows remote malicious users to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality.
Sugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1Sugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 2.0.1Sugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.1eSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 1.1dSugarcrm Sugarcrm 1.1aSugarcrm Sugarcrm 1.1bSugarcrm Sugarcrm 2.0.1a
7.5
CVSSv2
CVE-2009-2978
SQL injection vulnerability in SugarCRM 4.5.1o and previous versions, 5.0.0k and previous versions, and 5.2.0g and previous versions, allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Sugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.1eSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 3.5.1Sugarcrm Sugarcrm 4.0Sugarcrm SugarcrmSugarcrm Sugarcrm 5.2aSugarcrm Sugarcrm 5.2fSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 1.1dSugarcrm Sugarcrm 3.0.1Sugarcrm Sugarcrm 3.5Sugarcrm Sugarcrm 4.5.0fSugarcrm Sugarcrm 4.5.1Sugarcrm Sugarcrm 5.2dSugarcrm Sugarcrm 5.2cSugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1Sugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 2.0.1Sugarcrm Sugarcrm 4.0.1
4
CVSSv2
CVE-2011-0745
SugarCRM prior to 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable thro...
Sugarcrm Sugarcrm 5.5Sugarcrm Sugarcrm 4.1Sugarcrm Sugarcrm 1.1bSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 2.0.1cSugarcrm Sugarcrm 5.2.0gSugarcrm Sugarcrm 4.5.1iSugarcrm Sugarcrm 3.5.1Sugarcrm Sugarcrm 5.2eSugarcrm Sugarcrm 5.0.0Sugarcrm Sugarcrm 5.1.0Sugarcrm Sugarcrm 6.0.2Sugarcrm Sugarcrm 6.0.1Sugarcrm Sugarcrm 6.0Sugarcrm Sugarcrm 5.2hSugarcrm Sugarcrm 3.5Sugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 5.2g
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook