Lucene search
+L

2 matches found

OSV
OSV
•added 2024/06/12 7:38 a.m.•21 views

BIT-SUITECRM-2024-36411 SuiteCRM authenticated SQL Injection in EmailUIAjax displayView controller

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax displayView controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

9.6CVSS9.5AI score0.00435EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•1 views

CVE-2024-36411: Improper Neutralization of Special Elements used in an SQL Command

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax displayView controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

9.6CVSS5.7AI score0.00435EPSS
SaveExploits0References1
Rows per page
Query Builder