CVE-2005-0266
Published Jan 1, 2005
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4107E934-D5CF-4ABF-8CB6-0DA90F3D9A74"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.0f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85742E7F-C06C-46A5-9008-245BE6E4E0BF"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.0g:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B820A83B-0F03-4523-9D4D-3EB2930B35F7"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49FA30E3-7572-4BCC-8EFA-9D259DF892E4"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFBB2BDD-5FA2-40E1-9395-A9DED672E3FF"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.1b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "022D7E5E-BCBC-4E14-9C0D-50E5DD237D76"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.1c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22E73109-5473-417C-A003-7C1EE1DC3ABC"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.1d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F183CCFF-6D5B-43E7-A70F-E9AEA6E46880"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.1e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DA73438-7BA5-4668-90E2-2EECDBBB58A7"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.1f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6C3E6DF-AE5C-4D7F-99B3-16C3967A6A60"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BF53885-8C5B-4654-AB42-587290E58355"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A197BD9-85DD-47F2-B30B-6C7F372F6DCE"
},
{
"criteria": "cpe:2.3:a:sugarcrm:sugarcrm:2.0.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42F2BB29-5136-4F23-8D1B-0507A5FCBF13"
}
],
"operator": "OR"
}
]
}
]