4

CVE-2011-0745

Exploit
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sugarcrm ≫ Sugarcrm Version <= 6.1.2
Sugarcrm ≫ Sugarcrm Version1.0
Sugarcrm ≫ Sugarcrm Version1.0f
Sugarcrm ≫ Sugarcrm Version1.0g
Sugarcrm ≫ Sugarcrm Version1.1
Sugarcrm ≫ Sugarcrm Version1.1a
Sugarcrm ≫ Sugarcrm Version1.1b
Sugarcrm ≫ Sugarcrm Version1.1c
Sugarcrm ≫ Sugarcrm Version1.1d
Sugarcrm ≫ Sugarcrm Version1.1e
Sugarcrm ≫ Sugarcrm Version1.1f
Sugarcrm ≫ Sugarcrm Version1.5d
Sugarcrm ≫ Sugarcrm Version2.0.1
Sugarcrm ≫ Sugarcrm Version2.0.1a
Sugarcrm ≫ Sugarcrm Version2.0.1c
Sugarcrm ≫ Sugarcrm Version3.0.1
Sugarcrm ≫ Sugarcrm Version3.5
Sugarcrm ≫ Sugarcrm Version3.5.1
Sugarcrm ≫ Sugarcrm Version4.0
Sugarcrm ≫ Sugarcrm Version4.0.1
Sugarcrm ≫ Sugarcrm Version4.1
Sugarcrm ≫ Sugarcrm Version4.2
Sugarcrm ≫ Sugarcrm Version4.2.1
Sugarcrm ≫ Sugarcrm Version4.5.0
Sugarcrm ≫ Sugarcrm Version4.5.0f
Sugarcrm ≫ Sugarcrm Version4.5.1
Sugarcrm ≫ Sugarcrm Version4.5.1 Editioncommunity_edition
Sugarcrm ≫ Sugarcrm Version4.5.1i
Sugarcrm ≫ Sugarcrm Version4.5.1o
Sugarcrm ≫ Sugarcrm Version5.0.0
Sugarcrm ≫ Sugarcrm Version5.0.0 Editioncommunity_edition
Sugarcrm ≫ Sugarcrm Version5.0.0 Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.0.0h Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.0.0k Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.1.0 Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.1.0-beta Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.1c Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.1l
Sugarcrm ≫ Sugarcrm Version5.2.0g
Sugarcrm ≫ Sugarcrm Version5.2a
Sugarcrm ≫ Sugarcrm Version5.2c
Sugarcrm ≫ Sugarcrm Version5.2c Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.2d
Sugarcrm ≫ Sugarcrm Version5.2d Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.2e
Sugarcrm ≫ Sugarcrm Version5.2e Editionsugar_community_edition
Sugarcrm ≫ Sugarcrm Version5.2f
Sugarcrm ≫ Sugarcrm Version5.2g
Sugarcrm ≫ Sugarcrm Version5.2h
Sugarcrm ≫ Sugarcrm Version5.5 Updatebeta1
Sugarcrm ≫ Sugarcrm Version5.5 Updatebeta2
Sugarcrm ≫ Sugarcrm Version5.5.0
Sugarcrm ≫ Sugarcrm Version5.5.1
Sugarcrm ≫ Sugarcrm Version5.5.2
Sugarcrm ≫ Sugarcrm Version5.5.3
Sugarcrm ≫ Sugarcrm Version5.5.4
Sugarcrm ≫ Sugarcrm Version5.5a
Sugarcrm ≫ Sugarcrm Version6.0
Sugarcrm ≫ Sugarcrm Version6.0.1
Sugarcrm ≫ Sugarcrm Version6.0.2
Sugarcrm ≫ Sugarcrm Version6.0.3
Sugarcrm ≫ Sugarcrm Version6.1.0
Sugarcrm ≫ Sugarcrm Version6.1.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.96% 0.913
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.