CVE-2020-17373

SugarCRM before 10.1.0 Q3 2020 allows SQL Injection...

CVE-2020-17373

CVE-2020-17373 affects SugarCRM prior to 10.1.0 (Q3 2020). The vulnerability is an SQL Injection in the Reports Export path, tied to unsanitized input (notably via the encoded current_post parameter in index.php when module=Reports/export). This can allow remote attackers to craft SQL that leaks ...

SugarCRM SQL Injection

SugarCRM $user, "password" = $pass, "granttype" = "password", "clientid" = "sugar"; curlsetopt$ch, CURLOPTURL, "$urlrest/v10/oauth2/token"; curlsetopt$ch, CURLOPTPOST, true; curlsetopt$ch, CURLOPTPOSTFIELDS, jsonencode$params; curlsetopt$ch, CURLOPTHTTPHEADER, "Content-Type: application/json";...