Description

SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.

Remediation

References

CVE-2019-17310

Related Vulnerabilities

WordPress Plugin Secure File Manager Arbitrary File Upload (2.9.3)

WordPress Plugin OMFG Mobile Pro Cross-Site Scripting (1.1.26)

WordPress Plugin Count per Day Information Disclosure (3.2.5)

Oracle JRE CVE-2018-2790 Vulnerability (CVE-2018-2790)

WordPress Plugin Chatbot with IBM Watson Cross-Site Scripting (0.8.20)

Severity

High

Classification

CVE-2019-17310 CWE-94 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities