CVE

Id
52745  
CVE No.
CVE-2011-4833  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the (1) where and (2) order parameters in a get_full_list action to index.php.  
Phase
Assigned (20111214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
560111 52745 CVE-2011-4833 BUGTRAQ:20111130 Sql injection in SugarCRM  View
560112 52745 CVE-2011-4833 URL:http://www.securityfocus.com/archive/1/archive/1/520685/100/0/threaded  View
560113 52745 CVE-2011-4833 MISC:https://www.htbridge.ch/advisory/sql_injection_in_sugarcrm.html  View
560114 52745 CVE-2011-4833 CONFIRM:http://www.sugarcrm.com/crm/support/bugs.html#issue_47800  View
560115 52745 CVE-2011-4833 CONFIRM:http://www.sugarcrm.com/crm/support/bugs.html#issue_47805  View
560116 52745 CVE-2011-4833 CONFIRM:http://www.sugarcrm.com/crm/support/bugs.html#issue_47806  View
560117 52745 CVE-2011-4833 CONFIRM:http://www.sugarcrm.com/crm/support/bugs.html#issue_47839  View
560118 52745 CVE-2011-4833 OSVDB:77459  View
560119 52745 CVE-2011-4833 URL:http://www.osvdb.org/77459  View
560120 52745 CVE-2011-4833 SECTRACK:1026369  View
560121 52745 CVE-2011-4833 URL:http://securitytracker.com/id?1026369  View
560122 52745 CVE-2011-4833 SECUNIA:47011  View
560123 52745 CVE-2011-4833 URL:http://secunia.com/advisories/47011  View
560124 52745 CVE-2011-4833 XF:sugarcrm-index-sql-injection(71586)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33324 JVNDB-2011-003564 JRuby におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 JRuby は、ハッシュ衝突を想定した制限を行わずにフォームパラメータのハッシュ値を算出するため、サービス運用妨害 (CPU 資源の消費) 状態となる脆弱性が存在します。 CVE-2011-4838 52745 7.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003564.html  View