|
224751
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17310
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224752
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17309
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224753
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
|
CWE-94
Code Injection
|
CVE-2019-17308
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224754
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17307
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224755
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17306
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224756
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.
|
CWE-94
Code Injection
|
CVE-2019-17305
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224757
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17304
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224758
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.
|
CWE-94
Code Injection
|
CVE-2019-17303
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224759
|
8.8 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
|
CWE-94
Code Injection
|
CVE-2019-17302
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224760
|
7.2 |
HIGH
Network
|
sugarcrm
|
sugarcrm
|
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user.
|
CWE-94
Code Injection
|
CVE-2019-17301
|
2024-11-21 13:32 |
2019-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|