Description

SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2009-2978

Related Vulnerabilities

Python Integer Overflow or Wraparound Vulnerability (CVE-2008-4864)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10186)

WordPress Plugin WordPress File Upload Arbitrary File Upload (3.8.5)

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12528)

Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.5)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2009-2978