Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
Remediation
References
Related Vulnerabilities
Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5400)
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-2507)
PHP Other Vulnerability (CVE-2007-1287)
WordPress Plugin wpCommentTwit Cross-Site Request Forgery (0.5)
WordPress Plugin Push Notifications for WordPress (Lite) Cross-Site Request Forgery (6.0)