CVE-2008-2045

🗓️ 01 May 2008 18:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2008-2045	29 Apr 200800:00	–	circl
Cvelist	CVE-2008-2045	1 May 200818:00	–	cvelist
Exploit DB	SugarCRM Community Edition 4.5.1/5.0.0 - File Disclosure	29 Apr 200800:00	–	exploitdb
EUVD	EUVD-2008-2042	7 Oct 202500:30	–	euvd
NVD	CVE-2008-2045	1 May 200819:05	–	nvd
Prion	Path traversal	1 May 200819:05	–	prion
UbuntuCve	CVE-2008-2045	1 May 200819:05	–	ubuntucve

NVD

Node

sugarcrm sugarcrmMatch4.5.1community_edition

sugarcrm sugarcrmMatch5.0.0community_edition

Source	Link
securityreason	www.securityreason.com/securityalert/3844
securityfocus	www.securityfocus.com/bid/28981
exploit-db	www.exploit-db.com/exploits/5521
secunia	www.secunia.com/advisories/30002
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/42087
sugarcrm	www.sugarcrm.com/forums/showthread.php
vupen	www.vupen.com/english/advisories/2008/1388/references
security-assessment	www.security-assessment.com/files/advisories/2008-04-29_SugarCRM_local_file_disclosure.pdf
sugarcrm	www.sugarcrm.com/docs/Release_Notes/CommunityEdition_ReleaseNotes_5.0d/Sugar_Release_Notes_5.0d.2.6.html
securityfocus	www.securityfocus.com/archive/1/491417/100/0/threaded

Parameter	Position	Path	Description	CWE
url	query param	modules/Feeds/Feed.php	Absolute path traversal via RSS feed URL parameter leading to local file disclosure	CWE-22

16 Jun 2026 22:52Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

EPSS0.05205