Description
SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- sugarcrm-unspecified-sql-injection(52679) vdb-entry
- JVNDB-2009-000056 third-party-advisory
- http://www.sugarcrm.com/forums/showthread.php?t=50907
- http://www.ipa.go.jp/security/vuln/documents/2009/200908_sugarcrm.html
- http://www.sugarcrm.com/forums/showthread.php?t=50953
- 36423 third-party-advisory
- JVN#31035930 third-party-advisory
- 36118 vdb-entry