Description

Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.

Remediation

References

CVE-2005-0266

Related Vulnerabilities

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-29710)

WordPress Plugin Beaver Builder-WordPress Page Builder Multiple Cross-Site Scripting Vulnerabilities (2.5.5.2)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0057)

MySQL CVE-2014-4214 Vulnerability (CVE-2014-4214)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-3063)

Severity

Medium

Classification

CVE-2005-0266

Tags

Missing Update Known Vulnerabilities