Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2026/11/05 6:28 p.m.•3 views

CVE-2026-69141 SuiteCRM: SQL injection via search param in modules/Cases/controller.php

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the CasesController actiongetkbarticles action interpolates $POST'search' into a CASE WHEN ... LIKE expression and the SQL WHERE clause. Although securexss normally...

8.3CVSS5.8AI score
SaveExploits0References8
Rows per page
Query Builder