SugarCRM Other Vulnerability (CVE-2005-0266)

Description

Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.

Remediation

References

CVE-2005-0266

Related Vulnerabilities

Oracle HTTP Server Improper Input Validation Vulnerability (CVE-2020-35169)

Apache Tomcat version older than 6.0.10

WordPress Plugin Fotobook Cross-Site Scripting (3.2.3)

Oracle JRE CVE-2018-2811 Vulnerability (CVE-2018-2811)

WordPress Plugin Taxonomy Converter Unspecified Vulnerability (1.1)

Severity

Medium

Classification