Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sugarcrm sugarcrm 5.2f vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2010-0465
Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x prior to 5.2.0l and 5.5.x prior to 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.
Sugarcrm Sugarcrm 5.2cSugarcrm Sugarcrm 5.2dSugarcrm Sugarcrm 5.2.0gSugarcrm Sugarcrm 5.2aSugarcrm Sugarcrm 5.5Sugarcrm Sugarcrm 5.5.0Sugarcrm Sugarcrm 5.2gSugarcrm Sugarcrm 5.2hSugarcrm Sugarcrm 5.2eSugarcrm Sugarcrm 5.2f
7.5
CVSSv2
CVE-2009-2978
SQL injection vulnerability in SugarCRM 4.5.1o and previous versions, 5.0.0k and previous versions, and 5.2.0g and previous versions, allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Sugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.1eSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 3.5.1Sugarcrm Sugarcrm 4.0Sugarcrm SugarcrmSugarcrm Sugarcrm 5.2aSugarcrm Sugarcrm 5.2fSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 1.1dSugarcrm Sugarcrm 3.0.1Sugarcrm Sugarcrm 3.5Sugarcrm Sugarcrm 4.5.0fSugarcrm Sugarcrm 4.5.1Sugarcrm Sugarcrm 5.2dSugarcrm Sugarcrm 5.2cSugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1Sugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 2.0.1Sugarcrm Sugarcrm 4.0.1
4
CVSSv2
CVE-2011-0745
SugarCRM prior to 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable thro...
Sugarcrm Sugarcrm 5.5Sugarcrm Sugarcrm 4.1Sugarcrm Sugarcrm 1.1bSugarcrm Sugarcrm 1.1cSugarcrm Sugarcrm 2.0.1cSugarcrm Sugarcrm 5.2.0gSugarcrm Sugarcrm 4.5.1iSugarcrm Sugarcrm 3.5.1Sugarcrm Sugarcrm 5.2eSugarcrm Sugarcrm 5.0.0Sugarcrm Sugarcrm 5.1.0Sugarcrm Sugarcrm 6.0.2Sugarcrm Sugarcrm 6.0.1Sugarcrm Sugarcrm 6.0Sugarcrm Sugarcrm 5.2hSugarcrm Sugarcrm 3.5Sugarcrm Sugarcrm 1.0Sugarcrm Sugarcrm 1.0fSugarcrm Sugarcrm 1.0gSugarcrm Sugarcrm 1.1fSugarcrm Sugarcrm 1.5dSugarcrm Sugarcrm 5.2g
6
CVSSv2
CVE-2009-2146
Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) prior to 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the ...
Sugarcrm Sugarcrm 5.0.0hSugarcrm Sugarcrm 5.2dSugarcrm Sugarcrm 5.1.0Sugarcrm Sugarcrm 5.1.0-betaSugarcrm Sugarcrm 5.1cSugarcrm SugarcrmSugarcrm Sugarcrm 5.0.0Sugarcrm Sugarcrm 5.0.0kSugarcrm Sugarcrm 5.2c
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook