CVE-2011-0745
16.03.2011, 22:55
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sugarcrm | sugarcrm | 𝑥 ≤ 6.1.2 |
| sugarcrm | sugarcrm | 1.0 |
| sugarcrm | sugarcrm | 1.0f:f |
| sugarcrm | sugarcrm | 1.0g:g |
| sugarcrm | sugarcrm | 1.1 |
| sugarcrm | sugarcrm | 1.1a:a |
| sugarcrm | sugarcrm | 1.1b:b |
| sugarcrm | sugarcrm | 1.1c:c |
| sugarcrm | sugarcrm | 1.1d:d |
| sugarcrm | sugarcrm | 1.1e:e |
| sugarcrm | sugarcrm | 1.1f:f |
| sugarcrm | sugarcrm | 1.5d:d |
| sugarcrm | sugarcrm | 2.0.1 |
| sugarcrm | sugarcrm | 2.0.1a:a |
| sugarcrm | sugarcrm | 2.0.1c:c |
| sugarcrm | sugarcrm | 3.0.1 |
| sugarcrm | sugarcrm | 3.5 |
| sugarcrm | sugarcrm | 3.5.1 |
| sugarcrm | sugarcrm | 4.0 |
| sugarcrm | sugarcrm | 4.0.1 |
| sugarcrm | sugarcrm | 4.1 |
| sugarcrm | sugarcrm | 4.2 |
| sugarcrm | sugarcrm | 4.2.1 |
| sugarcrm | sugarcrm | 4.5.0 |
| sugarcrm | sugarcrm | 4.5.0f:f |
| sugarcrm | sugarcrm | 4.5.1 |
| sugarcrm | sugarcrm | 4.5.1 |
| sugarcrm | sugarcrm | 4.5.1i:i |
| sugarcrm | sugarcrm | 4.5.1o:o |
| sugarcrm | sugarcrm | 5.0.0 |
| sugarcrm | sugarcrm | 5.0.0 |
| sugarcrm | sugarcrm | 5.0.0 |
| sugarcrm | sugarcrm | 5.0.0h:h |
| sugarcrm | sugarcrm | 5.0.0k:k |
| sugarcrm | sugarcrm | 5.1.0 |
| sugarcrm | sugarcrm | 5.1.0-beta |
| sugarcrm | sugarcrm | 5.1c:c |
| sugarcrm | sugarcrm | 5.1l:l |
| sugarcrm | sugarcrm | 5.2.0g:g |
| sugarcrm | sugarcrm | 5.2a:a |
| sugarcrm | sugarcrm | 5.2c:c |
| sugarcrm | sugarcrm | 5.2c:c |
| sugarcrm | sugarcrm | 5.2d:d |
| sugarcrm | sugarcrm | 5.2d:d |
| sugarcrm | sugarcrm | 5.2e:e |
| sugarcrm | sugarcrm | 5.2e:e |
| sugarcrm | sugarcrm | 5.2f:f |
| sugarcrm | sugarcrm | 5.2g:g |
| sugarcrm | sugarcrm | 5.2h:h |
| sugarcrm | sugarcrm | 5.5:beta1 |
| sugarcrm | sugarcrm | 5.5:beta2 |
| sugarcrm | sugarcrm | 5.5.0 |
| sugarcrm | sugarcrm | 5.5.1 |
| sugarcrm | sugarcrm | 5.5.2 |
| sugarcrm | sugarcrm | 5.5.3 |
| sugarcrm | sugarcrm | 5.5.4 |
| sugarcrm | sugarcrm | 5.5a:a |
| sugarcrm | sugarcrm | 6.0 |
| sugarcrm | sugarcrm | 6.0.1 |
| sugarcrm | sugarcrm | 6.0.2 |
| sugarcrm | sugarcrm | 6.0.3 |
| sugarcrm | sugarcrm | 6.1.0 |
| sugarcrm | sugarcrm | 6.1.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References