CVE-2009-2978

EUVD-2009-2963
SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
sugarcrmsugarcrm
𝑥
≤ 4.5.1o
sugarcrmsugarcrm
𝑥
≤ 5.0.0k
sugarcrmsugarcrm
𝑥
≤ 5.2.0g
sugarcrmsugarcrm
1.0
sugarcrmsugarcrm
1.0f:f
sugarcrmsugarcrm
1.0g:g
sugarcrmsugarcrm
1.1
sugarcrmsugarcrm
1.1a:a
sugarcrmsugarcrm
1.1b:b
sugarcrmsugarcrm
1.1c:c
sugarcrmsugarcrm
1.1d:d
sugarcrmsugarcrm
1.1e:e
sugarcrmsugarcrm
1.1f:f
sugarcrmsugarcrm
1.5d:d
sugarcrmsugarcrm
2.0.1
sugarcrmsugarcrm
2.0.1a:a
sugarcrmsugarcrm
2.0.1c:c
sugarcrmsugarcrm
3.0.1
sugarcrmsugarcrm
3.5
sugarcrmsugarcrm
3.5.1
sugarcrmsugarcrm
4.0
sugarcrmsugarcrm
4.0.1
sugarcrmsugarcrm
4.1
sugarcrmsugarcrm
4.2
sugarcrmsugarcrm
4.2.1
sugarcrmsugarcrm
4.5.0
sugarcrmsugarcrm
4.5.0f:f
sugarcrmsugarcrm
4.5.1
sugarcrmsugarcrm
5.0.0
sugarcrmsugarcrm
5.0.0h:h
sugarcrmsugarcrm
5.2a:a
sugarcrmsugarcrm
5.2c:c
sugarcrmsugarcrm
5.2d:d
sugarcrmsugarcrm
5.2e:e
sugarcrmsugarcrm
5.2e:e
sugarcrmsugarcrm
5.2f:f
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sugarcrm
dapper
ignored
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne