Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
SugarCRM Improper Input Validation Vulnerability - CVE-2011-0745 - Vulnerability Database
SugarCRM

SugarCRM Improper Input Validation Vulnerability - CVE-2011-0745

Medium
Reference: CVE-2011-0745
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-0745
Title: SugarCRM Improper Input Validation Vulnerability
Overview:

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module reachable through index.php or (2) the names of contact persons via a ShowDuplicates action to the Contacts module reachable through index.php.