CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 7:29 a.m.•14 views

CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

7.2CVSS7.5AI score0.01353EPSS

SaveExploits0References1

NVD•added 2019/10/07 4:15 p.m.•19 views

CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

7.2CVSS7.3AI score0.01353EPSS

SaveExploits0References1

CVE•added 2019/10/07 3:4 p.m.•50 views

CVE-2019-17304

CVE-2019-17304 affects SugarCRM: PHP code injection in the MergeRecords module. Affected: SugarCRM before 8.0.4 and 9.x before 9.0.2. Root cause cited: insufficient input validation in the MergeRecords component, enabling an Admin user to inject PHP code. Impact is high for confidentiality, integ...

7.2CVSS7.2AI score0.01353EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2019/10/07 3:4 p.m.•21 views

CVE-2019-17304

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user...

7.3AI score0.01353EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by