EUVD-2018-18069

Malware in sbrugna...

CVE-2011-0745: Improper Input Validation

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover 1 the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or 2 t...

PT-2011-2604

Name of the Vulnerable Software and Affected Versions SugarCRM versions prior to 6.1.3 Description The issue allows remote authenticated users to discover sensitive information, including the names of customers and contact persons, by exploiting a flaw in how the software handles reloads and dire...