Lucene search
+L

3093 matches found

NVD
NVD
•added 2019/10/07 4:15 p.m.•33 views

CVE-2019-17309

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/07 4:15 p.m.•35 views

CVE-2019-17299

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/07 4:15 p.m.•28 views

CVE-2019-17306

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/07 4:15 p.m.•40 views

CVE-2019-17307

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/07 4:15 p.m.•18 views

CVE-2019-17306

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user...

7.2CVSS7.2AI score0.01353EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/07 4:15 p.m.•20 views

CVE-2019-17292

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

7.2CVSS7.5AI score0.01123EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/07 4:15 p.m.•16 views

CVE-2019-17292

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

7.2CVSS7.1AI score0.01123EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/07 4:15 p.m.•32 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•32 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•26 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•23 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•24 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•32 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•24 views

Directory traversal

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user...

6.5CVSS7AI score0.01897EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•24 views

Sql injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmseInbox module by an Admin user...

6.5CVSS7.4AI score0.01123EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/10/07 4:15 p.m.•22 views

Code injection

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user...

6.5CVSS7.2AI score0.01353EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2019/10/07 3:15 p.m.•26 views

CVE-2019-17317

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user...

7.2CVSS7.2AI score0.01395EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/07 3:15 p.m.•14 views

CVE-2019-17317

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user...

7.2CVSS7.1AI score0.01395EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/07 3:15 p.m.•13 views

CVE-2019-17315

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user...

7.2CVSS7.1AI score0.01434EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/07 3:15 p.m.•21 views

CVE-2019-17315

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user...

7.2CVSS7.2AI score0.01434EPSS
SaveExploits0References1
Rows per page
Query Builder