CVE-2020-17372

SugarCRM before 10.1.0 Q3 2020 allows XSS...

CVE-2017-17372

...

CVE-2017-17372

CVE-2017-17372 is rejected/not used per initial description; does not represent an active vulnerability entry.

CVE-2020-17372

SugarCRM before 10.1.0 Q3 2020 allows XSS...

CVE-2020-17372

SugarCRM prior to 10.1.0 (Q3 2020) is affected by reflected XSS vulnerabilities due to insufficient validation of client-side input. Exploitable via multiple vectors (e.g., do= metadata and current_step in Reports), allowing injected script execution in a victim’s browser. Affected versions: Suga...

SugarCRM Cross Site Scripting

SugarCRM 10.1.0 Multiple Reflected Cross-Site Scripting Vulnerabilities • Software Link: https://www.sugarcrm.com/ • Affected Versions: All versions prior to 10.1.0 Q3 2020. • Vulnerabilities Description: 1 User input passed through the “do” parameter when action is set to “metadata” is not...

CVE-2019-17372

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNUaccessPasswordrecovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D,...

CVE-2019-17372

CVE-2019-17372 affects multiple NETGEAR consumer routers (e.g., AC1450, D8500, R4500, R6300/R6300v2, R7000/R7000P, WNR3500L, WNDR4500/v2, WNDR4000, WNDR4500v2, WNR1000/v3, etc.). The underlying issue is an authentication bypass that allows remote attackers to disable all authentication by visitin...