Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.

Remediation

References

CVE-2019-17307

Related Vulnerabilities

Oracle Database Server CVE-2018-3259 Vulnerability (CVE-2018-3259)

WordPress Plugin Lightbox Jquery Possible Remote Code Execution (0.24)

MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-58520)

Oracle Database Server Missing Authentication for Critical Function Vulnerability (CVE-2026-47040)

WebLogic CVE-2021-2047 Vulnerability (CVE-2021-2047)

Severity

High

Classification

CVE-2019-17307 CWE-94 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities