5.5.0

DATE	CVE	VULNERABILITY TITLE	RISK
2011-03-16	CVE-2011-0745	Improper Input Validation vulnerability in Sugarcrm SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php. network low complexity sugarcrm CWE-20	4.0
2010-03-19	CVE-2010-0465	Cross-Site Scripting vulnerability in Sugarcrm Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field. network sugarcrm CWE-79	4.3