Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sugarcrm sugarcrm 2.0.1c vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2009-2978
SQL injection vulnerability in SugarCRM 4.5.1o and previous versions, 5.0.0k and previous versions, and 5.2.0g and previous versions, allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Sugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.1eSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 3.5.1Sugarcrm Sugarcrm 4.0Sugarcrm SugarcrmSugarcrm Sugarcrm 5.2aSugarcrm Sugarcrm 5.2fSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 1.1dSugarcrm Sugarcrm 3.0.1Sugarcrm Sugarcrm 3.5Sugarcrm Sugarcrm 4.5.0fSugarcrm Sugarcrm 4.5.1Sugarcrm Sugarcrm 5.2dSugarcrm Sugarcrm 5.2cSugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1Sugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 2.0.1Sugarcrm Sugarcrm 4.0.1
4
CVSSv2
CVE-2011-0745
SugarCRM prior to 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable thro...
Sugarcrm Sugarcrm 5.5Sugarcrm Sugarcrm 4.1Sugarcrm Sugarcrm 1.1bSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 2.0.1cSugarcrm Sugarcrm 5.2.0gSugarcrm Sugarcrm 4.5.1iSugarcrm Sugarcrm 3.5.1Sugarcrm Sugarcrm 5.2eSugarcrm Sugarcrm 5.0.0Sugarcrm Sugarcrm 5.1.0Sugarcrm Sugarcrm 6.0.2Sugarcrm Sugarcrm 6.0.1Sugarcrm Sugarcrm 6.0Sugarcrm Sugarcrm 5.2hSugarcrm Sugarcrm 3.5Sugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 5.2g
5
CVSSv2
CVE-2004-1226
SugarCRM Sugar Sales 2.0.1c and previous versions allows remote malicious users to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter.
Sugarcrm Sugarcrm
6.4
CVSSv2
CVE-2004-1228
The install scripts in SugarCRM Sugar Sales 2.0.1c and previous versions are not removed after installation, which allows malicious users to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database setti...
Sugarcrm Sugar Sales
10
CVSSv2
CVE-2004-1227
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and previous versions allows remote malicious users to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4)...
Sugarcrm Sugar Sales
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook