Page 3 of 14 results (0.001 seconds)

CVSS: 6.8EPSS: 3%CPEs: 1EXPL: 0

CVE-2006-6712

https://notcve.org/view.php?id=CVE-2006-6712

Cross-site scripting (XSS) vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en SugarCRM Open Source 4.5.0f y anteriores permite a un atacante remoto inyectar secuencias de comandos web o HTML a través de vectores no especificados en mensajes de correo manipulados. • http://dl.sugarforge.org/sugardocs/Notes/ReleaseNotes/SugarOpenSource_ReleaseNotes_4.5.0g.pdf http://jvn.jp/jp/JVN%2374079537/index.html http://secunia.com/advisories/23424 http://securitytracker.com/id?1017434 http://www.securityfocus.com/bid/21694 http://www.vupen.com/english/advisories/2006/5100 •

CVSS: 4.3EPSS: 0%CPEs: 13EXPL: 0

CVE-2005-0266

https://notcve.org/view.php?id=CVE-2005-0266

Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter. • http://marc.info/?l=bugtraq&m=110461706232174&w=2 http://www.securityfocus.com/bid/12113 https://exchange.xforce.ibmcloud.com/vulnerabilities/18719 •

CVSS: 10.0EPSS: 0%CPEs: 13EXPL: 2

CVE-2004-1225 – SugarCRM 1.x/2.0 Module - 'record' SQL Injection

https://notcve.org/view.php?id=CVE-2004-1225

SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality. • https://www.exploit-db.com/exploits/24768 http://marc.info/?l=bugtraq&m=110295433323795&w=2 http://www.gulftech.org/?node=research&article_id=00053-120104 http://www.securityfocus.com/bid/11740 https://exchange.xforce.ibmcloud.com/vulnerabilities/18325 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2004-1226

https://notcve.org/view.php?id=CVE-2004-1226

SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter. • http://marc.info/?l=bugtraq&m=110295433323795&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18447 •