Description

Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.

Remediation

References

CVE-2005-0266

Related Vulnerabilities

MyBB CVE-2020-22612 Vulnerability (CVE-2020-22612)

WordPress Plugin Rezgo Online Booking Cross-Site Scripting (1.8.6)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2141)

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2922)

WordPress Plugin wpForo Forum Cross-Site Scripting (2.1.8)

Severity

Medium

Classification

CVE-2005-0266

Tags

Missing Update Known Vulnerabilities