CVE-2009-2978

SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: Aug 27, 2009
Updated: Apr 13, 2023
CVE: CVE-2009-2978
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
sugarcrm / sugarcrm	1.5d	1.5d.x
sugarcrm / sugarcrm	5.0.0	5.0.0.x
sugarcrm / sugarcrm	4.2.1	4.2.1.x
sugarcrm / sugarcrm	4.5.0f	4.5.0f.x
sugarcrm / sugarcrm	1.1a	1.1a.x
sugarcrm / sugarcrm	4.0	4.0.x
sugarcrm / sugarcrm	5.2d	5.2d.x
sugarcrm / sugarcrm	3.5.1	3.5.1.x
sugarcrm / sugarcrm	1.1b	1.1b.x
sugarcrm / sugarcrm	4.0.1	4.0.1.x
sugarcrm / sugarcrm	4.1	4.1.x
sugarcrm / sugarcrm	1.0g	1.0g.x
sugarcrm / sugarcrm	4.5.1	4.5.1.x
sugarcrm / sugarcrm	4.5.0	4.5.0.x
sugarcrm / sugarcrm	-	4.5.1o.x
sugarcrm / sugarcrm	5.2a	5.2a.x
sugarcrm / sugarcrm	2.0.1c	2.0.1c.x
sugarcrm / sugarcrm	1.1e	1.1e.x
sugarcrm / sugarcrm	2.0.1	2.0.1.x
sugarcrm / sugarcrm	5.2f	5.2f.x
sugarcrm / sugarcrm	-	5.2.0g.x
sugarcrm / sugarcrm	3.5	3.5.x
sugarcrm / sugarcrm	5.2c	5.2c.x
sugarcrm / sugarcrm	1.1c	1.1c.x
sugarcrm / sugarcrm	1.1f	1.1f.x
sugarcrm / sugarcrm	1.0	1.0.x
sugarcrm / sugarcrm	5.2e	5.2e.x
sugarcrm / sugarcrm	-	5.0.0k.x
sugarcrm / sugarcrm	2.0.1a	2.0.1a.x
sugarcrm / sugarcrm	1.1d	1.1d.x
sugarcrm / sugarcrm	3.0.1	3.0.1.x
sugarcrm / sugarcrm	1.0f	1.0f.x
sugarcrm / sugarcrm	5.0.0h	5.0.0h.x
sugarcrm / sugarcrm	1.1	1.1.x
sugarcrm / sugarcrm	4.2	4.2.x

Vulnerability Database

CVE-2009-2978