Code injection

2019-10-0716:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

JSON

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.

CPENameOperatorVersion
sugarcrmge8.0.0
sugarcrmlt8.0.4
sugarcrmge9.0.0
sugarcrmlt9.0.2
sugarcrmge7.9.0.0
sugarcrmlt7.9.5.0
sugarcrmge8.0.0
sugarcrmlt8.0.4
sugarcrmge9.0.0
sugarcrmlt9.0.2

Name	Operator	Version
sugarcrm	ge	8.0.0
sugarcrm	lt	8.0.4
sugarcrm	ge	9.0.0
sugarcrm	lt	9.0.2
sugarcrm	ge	7.9.0.0
sugarcrm	lt	7.9.5.0
sugarcrm	ge	8.0.0
sugarcrm	lt	8.0.4
sugarcrm	ge	9.0.0
sugarcrm	lt	9.0.2