Secunia is reporting Sugar vulnerabilities

[salesagility]

http://secunia.com/advisories/37464/

Anyone have any thoughts on these ... were they closed in 5.2(h)?

[mikesolomon]

According to the report

The vulnerabilities are reported in versions 5.2.0j and 5.5.0.RC2. Other versions may also be affected

I tried to reproduce it on my dev site which is 5.2j with no success

reading the report again I see they say it is fixed in k - looks like I'd better upgrade

[clint]

The security vulnerabilities reported by Secunia found in Sugar 5.x are fixed in Sugar 5.2.0k and later and in Sugar 5.5 RC4 and later. We recommend all Sugar system be upgraded to the latest release to protect against any security vulnerabilities.

[salesagility]

The security vulnerabilities reported by Secunia found in Sugar 5.x are fixed in Sugar 5.2.0k and later and in Sugar 5.5 RC4 and later. We recommend all Sugar system be upgraded to the latest release to protect against any security vulnerabilities.

Thank you for the fast response and good to know that you're ahead of the game!