CVE-2009-2978

SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
sugarcrmsugarcrm
𝑥
≤ 4.5.1o
sugarcrmsugarcrm
𝑥
≤ 5.0.0k
sugarcrmsugarcrm
𝑥
≤ 5.2.0g
sugarcrmsugarcrm
1.0
sugarcrmsugarcrm
1.0f:f
sugarcrmsugarcrm
1.0g:g
sugarcrmsugarcrm
1.1
sugarcrmsugarcrm
1.1a:a
sugarcrmsugarcrm
1.1b:b
sugarcrmsugarcrm
1.1c:c
sugarcrmsugarcrm
1.1d:d
sugarcrmsugarcrm
1.1e:e
sugarcrmsugarcrm
1.1f:f
sugarcrmsugarcrm
1.5d:d
sugarcrmsugarcrm
2.0.1
sugarcrmsugarcrm
2.0.1a:a
sugarcrmsugarcrm
2.0.1c:c
sugarcrmsugarcrm
3.0.1
sugarcrmsugarcrm
3.5
sugarcrmsugarcrm
3.5.1
sugarcrmsugarcrm
4.0
sugarcrmsugarcrm
4.0.1
sugarcrmsugarcrm
4.1
sugarcrmsugarcrm
4.2
sugarcrmsugarcrm
4.2.1
sugarcrmsugarcrm
4.5.0
sugarcrmsugarcrm
4.5.0f:f
sugarcrmsugarcrm
4.5.1
sugarcrmsugarcrm
5.0.0
sugarcrmsugarcrm
5.0.0h:h
sugarcrmsugarcrm
5.2a:a
sugarcrmsugarcrm
5.2c:c
sugarcrmsugarcrm
5.2d:d
sugarcrmsugarcrm
5.2e:e
sugarcrmsugarcrm
5.2e:e
sugarcrmsugarcrm
5.2f:f
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sugarcrm
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
ignored