Sugarcrm: >> Sugarcrm Security Vulnerabilities
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user.
CVSS Score
7.2
EPSS Score
0.006
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user.
CVSS Score
8.8
EPSS Score
0.006
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user.
CVSS Score
7.2
EPSS Score
0.005
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
CVSS Score
8.8
EPSS Score
0.006
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.
CVSS Score
8.8
EPSS Score
0.006
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user.
CVSS Score
7.2
EPSS Score
0.005
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.
CVSS Score
8.8
EPSS Score
0.006
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.
CVSS Score
7.2
EPSS Score
0.005
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
CVSS Score
7.2
EPSS Score
0.005
Published
2019-10-07
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
CVSS Score
8.8
EPSS Score
0.006
Published
2019-10-07