296,336
Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.
| Software | From | Fixed in |
|---|---|---|
| sugarcrm / sugarcrm | 1.5d | 1.5d.x |
| sugarcrm / sugarcrm | 1.1a | 1.1a.x |
| sugarcrm / sugarcrm | 1.1b | 1.1b.x |
| sugarcrm / sugarcrm | 1.0g | 1.0g.x |
| sugarcrm / sugarcrm | 1.1e | 1.1e.x |
| sugarcrm / sugarcrm | 2.0.1 | 2.0.1.x |
| sugarcrm / sugarcrm | 1.1c | 1.1c.x |
| sugarcrm / sugarcrm | 1.1f | 1.1f.x |
| sugarcrm / sugarcrm | 1.0 | 1.0.x |
| sugarcrm / sugarcrm | 2.0.1a | 2.0.1a.x |
| sugarcrm / sugarcrm | 1.1d | 1.1d.x |
| sugarcrm / sugarcrm | 1.0f | 1.0f.x |
| sugarcrm / sugarcrm | 1.1 | 1.1.x |