CVE-2024-36410: Improper Neutralization of Special Elements used in an SQL Command

SuiteCRM is an open-source Customer Relationship Management CRM software application. In versions prior to 7.14.4 and 8.6.1, poor input validation allows for SQL Injection in EmailUIAjax messages count controller. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

PT-2024-26977

Name of the Vulnerable Software and Affected Versions SuiteCRM versions prior to 7.14.4 SuiteCRM versions prior to 8.6.1 Description The issue is related to poor input validation, allowing for SQL Injection in the EmailUIAjax messages count controller. This affects SuiteCRM, an open-source Custom...