CVE-2019-17293

SugarCRM versions before 8.0.4 and 9.x before 9.0.2 are affected by an SQL injection in the pmse_Project module exploitable by a Regular user. Roots cause: inadequate input validation in that module. CVSS data indicate high impact (HIGH) with network attack and no user interaction. The connected ...