Unscored CVE-2005-0266 EUVD-2005-0267GHSA-2m7w-mxjw-2c3q

Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via th…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in SugarCRM 1.X allows remote attackers to inject arbitrary web script or HTML via the (1) return_module, (2) return_action, (3) name, (4) module, or (5) record parameter.

References

20050101 Cross Site Scripting Vulnerabilities and Possible Code Execution mailing-list
12113 vdb-entry
sugar-sales-index-xss(18719) vdb-entry