GCVE - cpe:2.3:a:sugarcrm:sugarcrm:6.1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sugarcrm:sugarcrm:6.1.0:*:*:*:*:*:*:*

part: a version: 6.1.0 update: *

Vendor	Sugarcrm (`dd15fdac-9cd0-5ebf-98e7-767d21270f9e`)
Product	Sugarcrm (`153c5dce-2939-55e9-8424-89afa76b32da`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/sugarcrm/sugarcrm_dev`	purl2cpe	2026-06-01 10:11:12.194548

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4833`	vulnerable	2026-06-08 04:59:33.243199	Details available Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the (1) where and (2) order parameters in a get_full_list action to index.php. Published: 2011-12-15T02:00:00.000Z Updated: 2024-08-07T00:16:35.061Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/71586 http://www.sugarcrm.com/crm/support/bugs.html#issue_47839 https://www.htbridge.ch/advisory/sql_injection_in_sugarcrm.html http://www.osvdb.org/77459 http://www.sugarcrm.com/crm/support/bugs.html#issue_47805	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3803`	vulnerable	2026-06-08 04:59:27.870658	Details available SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layout_utils.php and certain other files. Published: 2011-09-24T00:00:00.000Z Updated: 2024-09-17T00:21:08.680Z Open on db.gcve.eu Reference links http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/SugarCRM-6.1.0 http://www.openwall.com/lists/oss-security/2011/06/27/6 http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0745`	vulnerable	2026-06-08 04:56:39.493323	Details available SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php. Published: 2011-03-16T22:00:00.000Z Updated: 2024-08-06T22:05:53.388Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46885 https://exchange.xforce.ibmcloud.com/vulnerabilities/66110 http://www.vupen.com/english/advisories/2011/0675 http://www.redteam-pentesting.de/advisories/rt-sa-2011-002 http://www.securitytracker.com/id?1025222	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.