CVE-2010-0465 in SugarCRM
Summary
Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.
Reservation
01/29/2010
Disclosure
03/19/2010
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 52271 | SugarCRM cross site scripting | 79 | Not defined | Official fix | CVE-2010-0465 |