cbcvebase.
CVE-2011-0745
published 2011-03-16

CVE-2011-0745: SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote…

PriorityP427medium4CVSS 2.0
AVNACLAuSCPINAN
EXPLOIT
EPSS
6.26%
92.7th percentile
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php.

Affected

56 ranges· showing 25
VendorProductVersion rangeFixed in
sugarcrmsugarcrm<= 6.1.2—
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
sugarcrmsugarcrm——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.