CVE-2006-6712

SugarCRM Open Source versions 4.5.0f and earlier are affected by a Cross-Site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages, potentially executing in the victim’s browser and, per JVN, coul...

PT-2006-7313 · Sugarcrm · Sugarcrm Open Source

Name of the Vulnerable Software and Affected Versions: SugarCRM Open Source versions 4.5.0f and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages. Recommendations: For SugarCRM Ope...