|
222891
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17299
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222892
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user.
|
CWE-89
SQL Injection
|
CVE-2019-17298
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222893
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Quotes module by a Regular user.
|
CWE-89
SQL Injection
|
CVE-2019-17297
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222894
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user.
|
CWE-89
SQL Injection
|
CVE-2019-17296
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222895
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user.
|
CWE-89
SQL Injection
|
CVE-2019-17295
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222896
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user.
|
CWE-89
SQL Injection
|
CVE-2019-17294
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222897
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.
|
CWE-89
SQL Injection
|
CVE-2019-17293
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222898
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by an Admin user.
|
CWE-89
SQL Injection
|
CVE-2019-17292
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222899
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Emails module by a Regular user.
|
CWE-89
SQL Injection
|
CVE-2019-17319
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222900
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by a Regular user.
|
CWE-89
SQL Injection
|
CVE-2019-17318
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|