CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 7:29 a.m.•9 views

CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

7.2CVSS7.5AI score0.01353EPSS

Exploits0References1

NVD•added 2019/10/07 4:15 p.m.•16 views

CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS

Exploits0References1

CVE•added 2019/10/07 3:4 p.m.•46 views

CVE-2019-17304

CVE-2019-17304 affects SugarCRM: PHP code injection in the MergeRecords module. Affected: SugarCRM before 8.0.4 and 9.x before 9.0.2. Root cause cited: insufficient input validation in the MergeRecords component, enabling an Admin user to inject PHP code. Impact is high for confidentiality, integ...

7.2CVSS7.2AI score0.01353EPSS

Exploits0References1Affected Software1