GCVE - cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*

part: a version: 1.5d update: *

Vendor	Sugarcrm (`dd15fdac-9cd0-5ebf-98e7-767d21270f9e`)
Product	Sugarcrm (`153c5dce-2939-55e9-8424-89afa76b32da`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/sugarcrm/sugarcrm_dev`	purl2cpe	2026-06-01 10:11:12.150792

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0745`	vulnerable	2026-06-08 04:56:39.463450	Details available SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php. Published: 2011-03-16T22:00:00.000Z Updated: 2024-08-06T22:05:53.388Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46885 https://exchange.xforce.ibmcloud.com/vulnerabilities/66110 http://www.vupen.com/english/advisories/2011/0675 http://www.redteam-pentesting.de/advisories/rt-sa-2011-002 http://www.securitytracker.com/id?1025222	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2978`	vulnerable	2026-06-08 04:51:31.639718	Details available SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2009-08-27T18:00:00.000Z Updated: 2024-08-07T06:07:37.413Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/52679 http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000056.html http://www.sugarcrm.com/forums/showthread.php?t=50907 http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html http://www.sugarcrm.com/forums/showthread.php?t=50953	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0266`	vulnerable	2026-06-08 04:48:12.164834	Details available Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter. Published: 2005-02-10T05:00:00.000Z Updated: 2024-08-07T21:05:25.547Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=110461706232174&w=2 http://www.securityfocus.com/bid/12113 https://exchange.xforce.ibmcloud.com/vulnerabilities/18719	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1225`	vulnerable	2026-06-08 04:47:53.378111	Details available SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality. Published: 2004-12-15T05:00:00.000Z Updated: 2024-08-08T00:46:11.822Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=110295433323795&w=2 http://www.securityfocus.com/bid/11740 https://exchange.xforce.ibmcloud.com/vulnerabilities/18325 http://www.gulftech.org/?node=research&article_id=00053-120104	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.