Lucene search
+L

2551 matches found

OSV
OSV
added 2019/10/07 4:15 p.m.6 views

CVE-2019-17309

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user...

7.2CVSS5.8AI score0.01353EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/07 4:15 p.m.12 views

CVE-2019-17307

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user...

7.2CVSS7.2AI score0.01353EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/07 4:15 p.m.8 views

CVE-2019-17301

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user...

7.2CVSS7.2AI score0.01353EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/07 4:15 p.m.20 views

CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/07 4:15 p.m.18 views

CVE-2019-17310

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/07 4:15 p.m.9 views

CVE-2019-17292

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

7.2CVSS7.1AI score0.01123EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/07 4:15 p.m.14 views

CVE-2019-17292

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

7.2CVSS7.5AI score0.01123EPSS
SaveExploits0References1
Prion
Prion
added 2019/10/07 4:15 p.m.20 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.23 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.24 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.14 views

Directory traversal

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user...

6.5CVSS7AI score0.01897EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.16 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.22 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.17 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.20 views

Sql injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

6.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/10/07 4:15 p.m.16 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2019/10/07 3:15 p.m.15 views

CVE-2019-17317

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user...

7.2CVSS7.2AI score0.01395EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/07 3:15 p.m.7 views

CVE-2019-17317

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user...

7.2CVSS7.1AI score
SaveExploits0References1
NVD
NVD
added 2019/10/07 3:15 p.m.16 views

CVE-2019-17315

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user...

7.2CVSS7.2AI score0.01434EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/07 3:15 p.m.7 views

CVE-2019-17315

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user...

7.2CVSS7.1AI score0.01434EPSS
SaveExploits0References1
Rows per page
Query Builder