Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Download Codes Cross-Site Scripting (2.5.1)
Grafana Insufficiently Protected Credentials Vulnerability (CVE-2019-15635)
WordPress Plugin WordPoints Multiple Vulnerabilities (1.7.0)
MySQL CVE-2019-2532 Vulnerability (CVE-2019-2532)
PHP Resource Management Errors Vulnerability (CVE-2011-3267)