PT-2017-16399

Name of the Vulnerable Software and Affected Versions SageCRM versions 7.x through 7.3 SP2 Description A SQL Injection issue was discovered. The AP DocumentUI.asp web resource includes Utilityfuncs.js, which crafts a SQL statement to identify the database in use with the current user's session. T...