Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
Remediation
References
Related Vulnerabilities
OpenSSL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2024-6119)
Telerik Web UI Missing Authorization Vulnerability (CVE-2021-28141)
WordPress Plugin Ocean Extra Security Bypass (1.5.8)
IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2019-4156)
WordPress Plugin WP Job Manager Cross-Site Request Forgery (1.25.2)