Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2023-36891 Vulnerability (CVE-2023-36891)
PHP Improper Input Validation Vulnerability (CVE-2016-10397)
WordPress Plugin Custom Permalinks Unspecified Vulnerability (0.7.15)
WordPress Plugin Lazyest Backup 'xml_or_all' Parameter Cross-Site Scripting (0.2.1)
WordPress Plugin Bitcoin/Altcoin Faucet Cross-Site Request Forgery (1.6.0)