Description

Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.

Remediation

References

CVE-2010-0465

Related Vulnerabilities

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1635)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-5273)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0213)

MySQL CVE-2017-10279 Vulnerability (CVE-2017-10279)

Django URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-7233)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2010-0465