SugarCRM unserialize() PHP Code Execution

A remote code execution vulnerability has been reported in SugarCRM servers 6.3.1 and below. The vulnerability is due to an error while parsing the user data to currentquerybypage parameter. Remote authenticated attacker can exploit this vulnerability by sending malicious command to the affected...