CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

redhatcve•added 2025/05/22 4:36 a.m.•11 views

CVE-2019-17305

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user...

8.8CVSS7.5AI score0.01401EPSS

Exploits0References1

osv•added 2019/10/07 4:15 p.m.•5 views

CVE-2019-17305

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user...

8.8CVSS7.4AI score0.01401EPSS

Exploits0References1

cve•added 2019/10/07 3:4 p.m.•44 views

CVE-2019-17305

CVE-2019-17305 affects SugarCRM prior to 8.0.4 and 9.x prior to 9.0.2. The vulnerability is a PHP code injection in the MergeRecords module that can be exploited by a Regular user. The connected sources consistently describe this as a PHP code injection flaw arising from insufficient input valida...

8.8CVSS8.8AI score0.01401EPSS

Exploits0References1Affected Software1