CVE-2010-0465 | BDVDB-2026-40741 Detail

Description#

Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/510116/100/0/threaded
http://www.securityfocus.com/bid/38772
http://secunia.com/advisories/38962
http://www.sugarcrm.com/crm/support/bugs.html?task=view&caseID=db4489b7-b5a8-4a6d-555b-4b9ffa7b4ffa

Exploit#

No public exploit known

History#

Version 12010-03-19Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.